Description
SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Tsuyoshi Saito | SOY CMS | ≤ 3.24.0 | — |
Critical · 9.8
CVE-2026-78032
EUVD-2026-67579GHSA-69j4-4rqg-85f9
SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server priv…
Published Aug 28, 2026 · Updated Aug 28, 2026 · Assigned by jpcert