CVE-2026-36239

PbootCMS v.3.2.11 contains a code injection vulnerability in its site configuration functionality

CVSS v3.1

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:L

EPSS

0.25% chance of exploitation in the next 30 days, 16th percentile

Published

2026-05-26

Updated

2026-07-05

Proof-of-concept exploits (1)

• TazmiDev/CVE-2026-36239

References

• CVE Record
• NVD entry

Related

• CVE-2026-53571
• CVE-2026-36228
• CVE-2026-36340
• CVE-2026-36227
• CVE-2026-36341
• CVE-2026-36226