CVE-2026-18856

Poesis Rhymix CMS Data Import importer.admin.controller.php procImporterAdminCheckXmlFile server-side request forgery

State: Published
Severity: 5.1 Medium
Published: Aug 5, 2026
Updated: Aug 5, 2026
Reserved: Aug 4, 2026

Description

A vulnerability was determined in Poesis Rhymix CMS up to 2.1.33. This impacts the function procImporterAdminCheckXmlFile of the file modules/importer/importer.admin.controller.php of the component Data Import Module. This manipulation of the argument filename causes server-side request forgery. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.1.34 will fix this issue. It is recommended to upgrade the affected component.

Scores

CVSS	Score	Vector	Source
4.0	5.1 Medium	CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P	VulDB
3.1	4.7 Medium	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C	VulDB
3.0	4.7 Medium	CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C	VulDB
2.0	5.8 Medium	AV:N/AC:L/Au:M/C:P/I:P/A:P/E:POC/RL:OF/RC:C	VulDB

Weaknesses

CWE-918 Server-Side Request Forgery

Affected Products

Product	Versions
Rhymix CMSPoesis	2.1.0Affected 2.1.1Affected 2.1.2Affected 2.1.3Affected 2.1.4Affected 2.1.5Affected 2.1.6Affected 2.1.7Affected 2.1.8Affected 2.1.9Affected 2.1.10Affected 2.1.11Affected 2.1.12Affected 2.1.13Affected 2.1.14Affected 2.1.15Affected 2.1.16Affected 2.1.17Affected 2.1.18Affected 2.1.19Affected 2.1.20Affected 2.1.21Affected 2.1.22Affected 2.1.23Affected 2.1.24Affected and 10 more versions

References

VDB-385868 | Poesis Rhymix CMS Data Import importer.admin.controller.php procImporterAdminCheckXmlFile server-side request forgeryvdb-entrytechnical-description
VDB-385868 | CTI Indicators (IOB, IOC, IOA)signaturepermissions-required
CVE-2026-18856 | CVE Analysis and Reportthird-party-advisory
Submit #858471 | Poesis Inc. Rhymix CMS <=2.1.33 Server-Side Request Forgerythird-party-advisory
https://github.com/MCzhao2006/Rhymix-SSRF-Reportexploit
https://rhymix.org/news/1948042related
https://rhymix.org/files/attach/releases/rhymix-2.1.34.zippatch

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.