SEMCMS CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM SEMCMS CVE published 2026-10-12

CVE-2026-108814

A SQL injection vulnerability exists in SEMCMS version 5.0, specifically in the SEMCMS_Banner.php file. This vulnerability allows remote attackers to execute SQL injection attacks. The exploit has been published and may be used. The vendor was contacted but did not respond. Defenders should assess exposure and prioritize patching or mitigation. The vulnerability impacts SEMCMS deployments, requiring verif [truncated]

HIGH SEMCMS CVE published 2026-06-09

CVE-2026-39169

CVE-2026-39169 is a HIGH-severity vulnerability (CVSS Score: 7.5) affecting SEMCMS 5.0. The vulnerability allows for unauthorized access in SEMCMS_copy.php. The CVE was published on [cvePublishedAt]2026-06-09T19:17:48.183Z[/cvePublishedAt] and modified on [cveModifiedAt]2026-06-09T21:17:11.650Z[/cveModifiedAt].