What is CVE-2026-79387?

CVE-2026-79387 is a vulnerability in N/a. Published 2026-09-09.

Is CVE-2026-79387 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2026-79387

SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an authenticated user to modify arbitrary user account fields (including passwords and roles) via crafted parameters to the User/mod interface, enabling account takeover.

Affected products

Public proof-of-concept exploits

jhli07/CVE-2026-79387-PbootCMS-SQL-Injection

References

cve@mitre.org
cve@mitre.org

Frequently asked questions

What is CVE-2026-79387?: CVE-2026-79387 is a vulnerability in N/a. Published 2026-09-09.
Is CVE-2026-79387 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.