Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.5	EPSS 0.5%	CVE-2026-30637OTCMS · n/a High7.5EPSS 0.5%2026-03-27CVE Database V5CVE-2026-30637 Server-Side Request Forgery (SSRF) vulnerability exists in the AnnounContent of the /admin/read.php in OTCMS V7.66 and before. The vulnerability allows remote attackers to craft HTTP requests, without authentication, containing a URL pointing to internal services or any remote server EPSS 0.5%Vulnerability	CVE Database V5	2026-03-27
Medium	4.3	EPSS 0.3%	CVE-2024-57252OtCMS · n/a Medium4.3EPSS 0.3%2025-01-17CVE Database V5CVE-2024-57252 OtCMS <=V7.46 is vulnerable to Server-Side Request Forgery (SSRF) in /admin/read.php, which can Read system files arbitrarily. EPSS 0.3%Vulnerability	CVE Database V5	2025-01-17

Page 1 of 1