CVE-2026-67960

CVSS 9.8 (critical) · published 2026-08-17

An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components

Weakness: CWE-94

Source: NVD CVE-2026-67960

References

• https://github.com/user-attachments/files/30816503/PbootCMS-3.2.15URL.Redirection.Vulnerability.docx
• https://github.com/xy-f0/CVE/issues/1#issue-4890245413

Check your software

Connect an AI agent to the Fixlane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.