CVE-2026-30637Disclosure(otcms / otcms)

LOWCVSS 7.5 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Server-Side Request Forgery (SSRF) vulnerability exists in the AnnounContent of the /admin/read.php in OTCMS V7.66 and before. The vulnerability allows remote attackers to craft HTTP requests, without authentication, containing a URL pointing to internal services or any remote server

otcms CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/cryingtor/Code-Audit/blob/master/ssrf.md

Weakness type (CWE)

CWE-918

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

otcms

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Affected systems

Vendors

otcms

Products

otcms

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud194d
Disclosure
🚨*CVE* CVE-2026-30637 Server-Side Request Forgery (SSRF) vulnerability exists in the AnnounContent of the /admin/read.php in OTCMS V7.66 and before. The vulnerability allows remote attacke… https://www.cve.org/CVERecord?id=CVE-2026-30637 ----- Traducción: La vulnerabilidad … http://infoflow.cloud`
Post summary
The tweet announces CVE‑2026‑30637, an SSRF flaw in OTCMS v7.66+ affecting /admin/read.php, and provides a link to the official CVE record, with no PoC or exploitation details.
0000019
65 followersView on X
CVE@CVEnew194d
Disclosure
CVE-2026-30637 Server-Side Request Forgery (SSRF) vulnerability exists in the AnnounContent of the /admin/read.php in OTCMS V7.66 and before. The vulnerability allows remote attacke… https://www.cve.org/CVERecord?id=CVE-2026-30637
Post summary
The text announces a Server‑Side Request Forgery vulnerability (CVE‑2026‑30637) affecting OTCMS prior to version 7.66, without mentioning PoC, exploit code, active use, patch, or debunking.
00000188
56.9K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	otcms	otcms	-	-	-

Explore more

Back to dashboard otcms CVEs otcms vulnerabilities