CVE-2026-36387: Malicious File Upload
Published May 7, 2026
·Updated
A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /addmembers.php. This vulnerability affects the file upload functionality, where improper file sanitization allows attackers to inject malicious files which leads RCE.
Affected Software
1 affected component
Codeastro CODEASTRO Membership Management System=1.0
Event History
May 7, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·04:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-36387?
CVE-2026-36387 is classified as a Remote Code Execution vulnerability which poses a high severity risk.
2
How do I fix CVE-2026-36387?
To fix CVE-2026-36387, ensure proper file sanitization and validation for uploads in the CODEASTRO Membership Management System.
3
What systems are affected by CVE-2026-36387?
CVE-2026-36387 affects CODEASTRO Membership Management System version 1.0.
4
What type of attacks can leverage CVE-2026-36387?
Attackers can exploit CVE-2026-36387 to upload malicious files that lead to Remote Code Execution.
5
Is there a patch available for CVE-2026-36387?
As of now, a specific patch for CVE-2026-36387 has not been publicly released.