CVE-2026-36387 in Membership Management System

الملخص

بحسب MITRE • 07/05/2026

A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /add_members.php. This vulnerability affects the file upload functionality, where improper file sanitization allows attackers to inject malicious files which leads RCE.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

• مسؤول: MITRE
• حجز: 06/04/2026
• إفشاء: 07/05/2026
• الاعتدال: تمت الموافقة
• إدخال: VDB-361887
• CPE: جاهز
• CWE: CWE-434 (مؤكد)
• CVSS: 6.3 (VulDB)
• EPSS: 0.00114
• KEV: لا
• النشاطات: منخفض جدًا

المصادر

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-36387
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-36387
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-36387/