CVE-2026-79987

A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker.

높음CWE-470 전체 CVE

취약점 유형

A remote, authenticated, non-admin Craft CMS Control Panel user with only the accessCp permission can execute operating system commands as the PHP web worker.

참고 자료

https://github.com/craftcms/cms
https://github.com/craftcms/cms/releases/tag/5.10.13
https://github.com/craftcms/cms/security/advisories/GHSA-9c4j-cjw3-r3xx
https://www.hckrt.com/hacktivity/HCKRT-9TSYY2

공격자보다 먼저 취약점을 찾으세요.

GitHub로 로그인하고 1분 안에 첫 감사를 실행하세요. 무료 플랜은 신용카드가 필요 없습니다.

무료 감사 시작하기 요금제 보기