CVE-2026-120347 dayrui CVE debrief

Who should care

Defenders responsible for XunRuiCMS installations, particularly those using version up to 4.7.4, should assess exposure and prioritize upgrading to the patched version. This includes operators, platform administrators, vulnerability management teams, and security teams who need to verify the affected versions, assess exposure, and monitor for suspicious activity related to the View function.

Why it matters

CVE-2026-120347 is a SQL injection vulnerability in XunRuiCMS that allows remote attackers to manipulate the catid argument in the View function of the Member Module. Defenders should assess exposure, prioritize patching, and monitor for suspicious activity.

• Remote attackers may exploit this vulnerability to inject malicious SQL code
• Successful exploitation could lead to unauthorized data access or modification
• Defenders should verify the affected versions and assess exposure
• Patching to version 9b6ea0cf9c6e8cdc9a5260c38b95da5fed4c4231 or later is recommended

Technical summary

The View function in dayrui/Fcms/Core/View.php of the Member Module in XunRuiCMS up to 4.7.4 is vulnerable to SQL injection attacks via manipulation of the catid argument. This vulnerability allows remote attackers to inject malicious SQL code, potentially leading to unauthorized data access or modification. The affected component should be upgraded to the patched version. Defenders should assess exposure, prioritize patching, and monitor for suspicious activity related to the View function. The patch 9b6ea0cf9c6e8cdc9a5260c38b95da5fed4c4231 is available for XunRuiCMS up to 4.7.4.

Defensive priority

Upgrade to patched version

Recommended defensive actions

• Upgrade to patched version 9b6ea0cf9c6e8cdc9a5260c38b95da5fed4c4231
• Review and restrict access to the Member Module
• Monitor for suspicious activity related to the View function
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
• Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
• Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
• Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but the affected versions and potential impact require further verification. Defenders should verify the affected versions, assess exposure, and monitor for suspicious activity related to the View function. The patch 9b6ea0cf9c6e8cdc9a5260c38b95da5fed4c4231 is available for XunRuiCMS up to 4.7.4. However, additional verification is needed to confirm the scope of the vulnerability and potential impact on specific deployments.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.