CVE-2026-27697: baserCMS: SQL injection vulnerability in blog post
baserCMS has a SQL injection vulnerability in blog posts.
Target baserCMS 5.2.2 and earlier versions
Vulnerability
Malicious SQL may be executed in blog posts.
Countermeasures Update to the latest version of baserCMS
Please refer to the following page to reference for more information. https://basercms.net/security/JVN52157568
Credits
Mirai Matsumoto@Future Secure Wave, Inc.
Other sources
baserCMS is a website development framework. Prior to version 5.2.3, baserCMS has a SQL injection vulnerability in blog posts. This issue has been patched in version 5.2.3.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-27697?
CVE-2026-27697 is classified as a medium severity SQL injection vulnerability.
How do I fix CVE-2026-27697?
To fix CVE-2026-27697, upgrade baserCMS to version 5.2.3 or later.
What versions of baserCMS are affected by CVE-2026-27697?
CVE-2026-27697 affects all versions of baserCMS prior to version 5.2.3.
What type of attack does CVE-2026-27697 facilitate?
CVE-2026-27697 facilitates SQL injection attacks, allowing attackers to manipulate database queries.
Is CVE-2026-27697 being actively exploited?
There are currently reports indicating that CVE-2026-27697 may be actively exploited in the wild.