PT-2026-29151 · Basercms · Basercms

Ren Xingdian · Publicado 2026-03-31 · Atualizado 2026-04-01 · CVE-2026-30880

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions baserCMS versions prior to 5.2.3

Description baserCMS is a website development framework. Before version 5.2.3, it contains an operating system command injection issue within the installer. This allows attackers to potentially execute arbitrary commands on the system. The issue has been addressed in version 5.2.3.

Recommendations Update baserCMS to version 5.2.3 or later.

Exploit

Correção

RCE

OS Command Injection

Enumeração de Fraquezas

CWE-78

Identificadores relacionados

CVE-2026-30880

GHSA-6HPG-8RX3-CWGV

Produtos afetados

Basercms

Referências · 12

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30880.json · Exploit
• https://github.com/baserproject/basercms/releases/tag/5.2.3 · Nota
• https://github.com/baserproject/basercms/security/advisories/GHSA-6hpg-8rx3-cwgv · Aviso do Fabricante
• https://github.com/baserproject/basercms · Nota
• https://twitter.com/CVEnew/status/2038916057575178424 · Publicação no Twitter
• https://twitter.com/0dayPublishing/status/2039008451582419284 · Publicação no Twitter
• https://twitter.com/CVEarity/status/2038906444335214645 · Publicação no Twitter
• https://basercms.net/security/JVN_20837860 · Aviso do Fabricante
• https://twitter.com/pulsepatchio/status/2039361234068201949 · Publicação no Twitter
• https://osv.dev/vulnerability/GHSA-6hpg-8rx3-cwgv · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2026-30880 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-30880 · Nota de Segurança