CVE-2026-67960: Code Injection
Published Aug 17, 2026
·Updated
An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components
Affected Software
1 affected component
Pbootcms Pbootcms=3.2.15
Event History
Aug 17, 2026
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·10:17 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2026-67960?
CVE-2026-67960 has a risk score of 85, indicating it is a high severity vulnerability.
2
How can I mitigate CVE-2026-67960?
To mitigate CVE-2026-67960, it's crucial to update PbootCMS to a patched version that addresses this vulnerability.
3
What components are affected by CVE-2026-67960?
CVE-2026-67960 affects the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components in PbootCMS v.3.2.15.
4
What type of vulnerability is CVE-2026-67960?
CVE-2026-67960 is a code execution vulnerability that allows attackers to execute arbitrary code.
5
When was CVE-2026-67960 published?
CVE-2026-67960 was published on August 17, 2026.