CVE Catalog
CVE-2026-67960
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.16%
6th percentile - higher than 6% of all known CVEs
Summary
An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components.
Risk Assessment
An attacker could execute arbitrary code on the server, potentially leading to full system compromise, data theft, or application disruption.
Recommendation
It is recommended to update PbootCMS to the latest version that includes security fixes and restrict access to sensitive functions.
Original NVD description (English source)
An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components