PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-79387 PbootCMS CVE debrief

CVE-2026-79387 is a SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5. An authenticated user can modify arbitrary user account fields, including passwords and roles, via crafted parameters to the User/mod interface. This vulnerability allows for potential elevation of privileges and account takeover. Defenders responsible for PbootCMS deployments, particularly those with authenticated user access, should assess exposure and prioritize mitigation. The CVE record and NVD entry provide details on the vulnerability, but additional verification is necessary to confirm affected deployments and assess operational impact.

Vendor
PbootCMS
Product
PbootCMS
CVSS
MEDIUM 4.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-09-09
Original CVE updated
2026-09-14
Advisory published
2026-09-09
Advisory updated
2026-09-14

Who should care

Defenders responsible for PbootCMS deployments, particularly those with authenticated user access, should assess exposure and prioritize mitigation.

Why it matters

CVE-2026-79387 is a medium-severity SQL injection vulnerability in PbootCMS that allows authenticated users to modify arbitrary user account fields, potentially leading to account takeover. Defenders responsible for PbootCMS deployments should assess exposure and prioritize mitigation.

  • Authenticated users can modify arbitrary user account fields, potentially leading to account takeover.
  • The vulnerability allows for potential elevation of privileges.
  • Defenders need to verify and mitigate this vulnerability to prevent potential account takeovers.
  • Remediation priority is medium due to the CVSS score of 4.3.

Technical summary

CVE-2026-79387 is a SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5. An authenticated user can modify arbitrary user account fields, including passwords and roles, via crafted parameters to the User/mod interface. This vulnerability allows for potential elevation of privileges and account takeover. Defenders should prioritize verifying and mitigating this vulnerability in PbootCMS versions 3.2.0 through 3.2.5. Input validation and sanitization for user input should be implemented, and access to the User/mod interface should be restricted. Susp

Defensive priority

Defenders should prioritize verifying and mitigating this SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5.

Recommended defensive actions

  • Verify PbootCMS versions 3.2.0 through 3.2.5 are in use and assess exposure
  • Implement input validation and sanitization for user input
  • Restrict access to the User/mod interface
  • Monitor for suspicious activity related to user account modifications

Evidence notes

The CVE record and NVD entry provide details on the SQL injection vulnerability in PbootCMS. However, the corpus lacks specific information on exploitation, victims, or business impact.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-79387 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-79387

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-79387 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-79387

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.