High · 8.8 CVE-2026-79423 EUVD-2026-71768GHSA-8w4v-9rj9-5qqm

An authenticated remote code execution (RCE) vulnerability in the admin_config.php component of seacms v13.6 allows attackers to execute ar…

Published Sep 4, 2026 · Updated Sep 8, 2026 · Assigned by mitre

Description

An authenticated remote code execution (RCE) vulnerability in the admin_config.php component of seacms v13.6 allows attackers to execute arbitrary code via a crafted POST request.

References

https://github.com/seacmscom/seacms
https://github.com/returnwrong/returnwrong-security-advisories/blob/main/CVE-2026-79423.md