CVE-2026-21861 in baserproject basercms
Sumário (Inglês)
baserCMS is a website development framework. Prior to version 5.2.3, baserCMS contains an OS command injection vulnerability in the core update functionality. An authenticated administrator can execute arbitrary OS commands on the server due to improper handling of user-controlled input that is directly passed to exec() without sufficient validation or escaping. This issue has been patched in version 5.2.3.
Responsável
GitHub_M
Reservar
05/01/2026
Divulgação
31/03/2026
Inscrições
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerabilidade | CWE | Exp | Con | CVE |
|---|---|---|---|---|---|
| 354319 | baserproject basercms exec Elevação de Privilégios | 78 | Não definido | Correção oficial | CVE-2026-21861 |