CRITICAL 9.8 CVE-2026-67960 Published 17 Aug 2026

PbootCMS Arbitrary Code Execution Vulnerability

Worried this affects one of your servers?

PbootCMS version 3.2.15 is affected by an arbitrary code execution vulnerability.

The issue can be exploited through multiple components, including:

  • MemberController.php
  • UserController.php
  • CommentController.php
  • ContentController.php
  • helper.php

An attacker can leverage these components to execute arbitrary code on the target installation.

Reference: CVE-2026-67960 on NVD

← Back to Security News