CVE-2026-108814: SEMCMS SEMCMS_Banner.php sql injection
Published Oct 12, 2026
·Updated
A flaw has been found in SEMCMS up to 5.0. This impacts an unknown function of the file SEMCMSBanner.php. Executing a manipulation can lead to sql injection. It is possible to launch the attack remotely. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
1 affected component
SEMCMS SEMCMS<=5.0
Event History
Oct 12, 2026
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:17 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
An attacker needs low-level privileges and can attack remotely. No user interaction is required.
2
Which SEMCMS versions are affected?
The issue affects SEMCMS versions up to and including 5.0. The available information does not identify a fixed version.
3
How urgent is remediation?
A public exploit has been published and may be used, increasing the likelihood of exploitation. The vendor did not respond to the disclosure according to the available report.