What is GHSA-pq26-vh26-f4ph?

GHSA-pq26-vh26-f4ph is a security advisory published by GitHub Security Advisories with Critical severity. An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the...

Which CVE IDs does GHSA-pq26-vh26-f4ph cover?

GHSA-pq26-vh26-f4ph covers the following CVE IDs: CVE-2026-67960. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-pq26-vh26-f4ph?

GHSA-pq26-vh26-f4ph has a CVSS v3 base score of 9.8, published by GitHub Security Advisories.

GHSA-pq26-vh26-f4phCriticalCVSS 9.8

An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the...

Vendor

GitHub Security Advisories

Published

August 18, 2026

Last Modified

August 18, 2026

🔗 CVE IDs covered (1)

CVE-2026-67960 →

📋 Description

An issue in PbootCMS v.3.2.15 allows an attacker to execute arbitrary code via the MemberController.php, UserController.php, CommentController.php, ContentController.php, and helper.php components

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-67960
https://github.com/xy-f0/CVE/issues/1#issue-4890245413
https://github.com/user-attachments/files/30816503/PbootCMS-3.2.15URL.Redirection.Vulnerability.docx
https://github.com/advisories/GHSA-pq26-vh26-f4ph