CVE-2026-78032

CriticalCVSS 9.8

Published: 28/08/2026(UTC)Translated: 28/08/2026(UTC)NVD NIST

Summary

SOY CMS has an issue with deserialization of untrusted data. An attacker may execute arbitrary code with web server privileges.

Risk of server compromise and breach of data confidentiality and integrity.

Update SOY CMS to the latest version and restrict access to the admin panel.

Original NVD description (English source)

SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege.