CVE-2026-78032

CVSS 9.8 (critical) · published 2026-08-28

SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege.

Weakness: CWE-502

Source: NVD CVE-2026-78032

References

• https://jvn.jp/en/jp/JVN04485476/
• https://saitodev.co/article/7105

Check your software

Connect an AI agent to the FixLane MCP server or ask the Telegram bot to check what you have installed against incidents with a verified fixed version.