CVE-2025-65836

CRITICAL

PublicCMS V5.202506.b - Server-Side Request Forgery in SimpleAiAdminController

Title source: llm

PublicCMS V5.202506.b is vulnerable to SSRF. in the chat interface of SimpleAiAdminController.

Core 3

Core References

Exploit, Third Party Advisory

Product

Exploit, Issue Tracking

CVSS v3 9.1

EPSS 0.0028

EPSS Percentile 19.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact total

CWE

CWE-918

Status published

Products (1)

publiccms/publiccms 5.202506.b

Published Dec 01, 2025

Tracked Since Feb 18, 2026