CVE-2026-12066: PbootCMS Password MemberController.php retrieve password recovery
A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the file apps/home/controller/MemberController.php of the component Password Handler. The manipulation of the argument username/password/email/checkcode results in weak password recovery. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Configuration
Disable or remove/disable the password recovery/retrieve functionality (apps/home/controller/MemberController.php retrieve) until an official vendor patch is available to prevent remote exploitation.
PbootCMS (apps/home/controller/MemberController.php - retrieve / password recovery) password_recovery = disabled - Compensating control
Block or restrict access to the password-recovery endpoint (apps/home/controller/MemberController.php retrieve) using a WAF, firewall, or access control so that it is not reachable from the public Internet (restrict to trusted IPs or internal networks).
- Operational
Assume possible compromise where the weakness existed: force a password reset for user accounts, rotate any credentials potentially exposed, review audit logs for exploitation of the retrieve endpoint, and monitor for related malicious activity until fixes are applied.
Event History
Frequently Asked Questions
What is the severity of CVE-2026-12066?
CVE-2026-12066 has a medium severity score of 5.5.
What systems are affected by CVE-2026-12066?
CVE-2026-12066 affects PbootCMS versions up to 3.2.12.
How do I fix CVE-2026-12066?
To mitigate CVE-2026-12066, update PbootCMS to a version newer than 3.2.12 that addresses the vulnerability.
What type of vulnerability is CVE-2026-12066?
CVE-2026-12066 is a security flaw in the password recovery functionality of PbootCMS.
What impact does CVE-2026-12066 have?
CVE-2026-12066 allows attackers to exploit weak password recovery mechanisms leading to potential unauthorized access.