{"id":"CVE-2026-48707","title":"InstantCMS is a free and open source content management system","summary":"InstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Server-Side Request Forgery (SSRF) vulnerability in the file upload functionality (`system/core/uploader.php` at lines 509-532). When the \"up…","severity":"low","cvss":3.1,"cvssVector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N","cwe":["CWE-918"],"vendor":"instantsoft","product":"icms2","affected":["icms2 < 2.18.2"],"published":"2026-09-08","updated":"2026-09-11","sourceUpdated":"2026-09-11T21:17:10.250","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-48707","references":[{"url":"https://github.com/instantsoft/icms2/commit/04b8fe0eb75fc5f44eecb15684c7d3660586683d","label":"security-advisories@github.com"},{"url":"https://github.com/instantsoft/icms2/security/advisories/GHSA-cm47-mwv3-f534","label":"security-advisories@github.com"},{"url":"https://github.com/instantsoft/icms2/security/advisories/GHSA-cm47-mwv3-f534","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-11T20:50:45.764807Z"},"epss":0.0021,"epssPercentile":0.11501,"ingestedAt":"2026-09-08T18:07:34.904Z","slug":"CVE-2026-48707","body":"## Overview\n\nInstantCMS is a free and open source content management system. Versions prior to 2.18.2 have a Server-Side Request Forgery (SSRF) vulnerability in the file upload functionality (`system/core/uploader.php` at lines 509-532). When the \"upload from URL\" feature follows an HTTP redirect, the redirected target URL bypasses the private IP address blacklist check. This allows authenticated users to scan and access internal network services. Version 2.18.2 contains a fix.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":29,"depthScoreParts":{"impact":17.1,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":201703,"id":"CVE-2026-48707","ts":1789399627051,"field":"exploit_available","old":"false","new":"true"},{"seq":200435,"id":"CVE-2026-48707","ts":1789397255180,"field":"exploit_available","old":"true","new":"false"},{"seq":198070,"id":"CVE-2026-48707","ts":1789384333921,"field":"exploit_available","old":"false","new":"true"},{"seq":196150,"id":"CVE-2026-48707","ts":1789383513911,"field":"exploit_available","old":"true","new":"false"},{"seq":195079,"id":"CVE-2026-48707","ts":1789380394532,"field":"exploit_available","old":"false","new":"true"},{"seq":193866,"id":"CVE-2026-48707","ts":1789378375701,"field":"exploit_available","old":"true","new":"false"},{"seq":192653,"id":"CVE-2026-48707","ts":1789376343419,"field":"exploit_available","old":"false","new":"true"},{"seq":191440,"id":"CVE-2026-48707","ts":1789373276285,"field":"exploit_available","old":"true","new":"false"},{"seq":190225,"id":"CVE-2026-48707","ts":1789369228178,"field":"exploit_available","old":"false","new":"true"},{"seq":189012,"id":"CVE-2026-48707","ts":1789368156582,"field":"exploit_available","old":"true","new":"false"},{"seq":187795,"id":"CVE-2026-48707","ts":1789365080841,"field":"exploit_available","old":"false","new":"true"},{"seq":186582,"id":"CVE-2026-48707","ts":1789363140987,"field":"exploit_available","old":"true","new":"false"},{"seq":185368,"id":"CVE-2026-48707","ts":1789361039085,"field":"exploit_available","old":"false","new":"true"},{"seq":184155,"id":"CVE-2026-48707","ts":1789358042654,"field":"exploit_available","old":"true","new":"false"},{"seq":182406,"id":"CVE-2026-48707","ts":1789354162287,"field":"exploit_available","old":"false","new":"true"},{"seq":181199,"id":"CVE-2026-48707","ts":1789353025446,"field":"exploit_available","old":"true","new":"false"},{"seq":179992,"id":"CVE-2026-48707","ts":1789350100865,"field":"exploit_available","old":"false","new":"true"},{"seq":178785,"id":"CVE-2026-48707","ts":1789347977174,"field":"exploit_available","old":"true","new":"false"},{"seq":177578,"id":"CVE-2026-48707","ts":1789346237332,"field":"exploit_available","old":"false","new":"true"},{"seq":176371,"id":"CVE-2026-48707","ts":1789342893353,"field":"exploit_available","old":"true","new":"false"},{"seq":175825,"id":"CVE-2026-48707","ts":1789338677213,"field":"exploit_available","old":"false","new":"true"},{"seq":175695,"id":"CVE-2026-48707","ts":1789338497116,"field":"exploit_available","old":"true","new":"false"},{"seq":174490,"id":"CVE-2026-48707","ts":1789334680440,"field":"exploit_available","old":"false","new":"true"},{"seq":173285,"id":"CVE-2026-48707","ts":1789333366158,"field":"exploit_available","old":"true","new":"false"},{"seq":172099,"id":"CVE-2026-48707","ts":1789330949837,"field":"exploit_available","old":"false","new":"true"},{"seq":170913,"id":"CVE-2026-48707","ts":1789328493890,"field":"exploit_available","old":"true","new":"false"},{"seq":169708,"id":"CVE-2026-48707","ts":1789326992704,"field":"exploit_available","old":"false","new":"true"},{"seq":168503,"id":"CVE-2026-48707","ts":1789323547701,"field":"exploit_available","old":"true","new":"false"},{"seq":167298,"id":"CVE-2026-48707","ts":1789319438357,"field":"exploit_available","old":"false","new":"true"},{"seq":166093,"id":"CVE-2026-48707","ts":1789318440506,"field":"exploit_available","old":"true","new":"false"},{"seq":164888,"id":"CVE-2026-48707","ts":1789315633774,"field":"exploit_available","old":"false","new":"true"},{"seq":163683,"id":"CVE-2026-48707","ts":1789313362669,"field":"exploit_available","old":"true","new":"false"},{"seq":162478,"id":"CVE-2026-48707","ts":1789311763953,"field":"exploit_available","old":"false","new":"true"},{"seq":161273,"id":"CVE-2026-48707","ts":1789308398471,"field":"exploit_available","old":"true","new":"false"},{"seq":160778,"id":"CVE-2026-48707","ts":1789304331720,"field":"exploit_available","old":"false","new":"true"},{"seq":160325,"id":"CVE-2026-48707","ts":1789303896553,"field":"exploit_available","old":"true","new":"false"},{"seq":159386,"id":"CVE-2026-48707","ts":1789300347993,"field":"exploit_available","old":"false","new":"true"},{"seq":158616,"id":"CVE-2026-48707","ts":1789299392490,"field":"exploit_available","old":"true","new":"false"},{"seq":157580,"id":"CVE-2026-48707","ts":1789296529876,"field":"exploit_available","old":"false","new":"true"},{"seq":156375,"id":"CVE-2026-48707","ts":1789294478855,"field":"exploit_available","old":"true","new":"false"},{"seq":155170,"id":"CVE-2026-48707","ts":1789292736463,"field":"exploit_available","old":"false","new":"true"},{"seq":153965,"id":"CVE-2026-48707","ts":1789289455176,"field":"exploit_available","old":"true","new":"false"},{"seq":152615,"id":"CVE-2026-48707","ts":1789281383441,"field":"exploit_available","old":"false","new":"true"},{"seq":152255,"id":"CVE-2026-48707","ts":1789280988816,"field":"exploit_available","old":"true","new":"false"},{"seq":151216,"id":"CVE-2026-48707","ts":1789277484472,"field":"exploit_available","old":"false","new":"true"},{"seq":150177,"id":"CVE-2026-48707","ts":1789275954177,"field":"exploit_available","old":"true","new":"false"},{"seq":149144,"id":"CVE-2026-48707","ts":1789273649525,"field":"exploit_available","old":"false","new":"true"},{"seq":148111,"id":"CVE-2026-48707","ts":1789271002557,"field":"exploit_available","old":"true","new":"false"},{"seq":146151,"id":"CVE-2026-48707","ts":1789269229715,"field":"exploit_available","old":"false","new":"true"},{"seq":145053,"id":"CVE-2026-48707","ts":1789266206955,"field":"exploit_available","old":"true","new":"false"}]}