CVE-2026-30877

baserCMS is a website development framework. Prior to version 5.2.3, there is an OS command injection vulnerability in the update functionality. Due to this issue, an authenticated user with administrator privileges in baserCMS can execute arbitrary OS commands on the server with the privileges of the user account running baserCMS. This issue has been patched in version 5.2.3.

• CWE-78

• https://basercms.net/security/JVN_20837860Vendor Advisory
• https://github.com/baserproject/basercms/releases/tag/5.2.3Release Notes
• https://github.com/baserproject/basercms/security/advisories/GHSA-m9g7-rgfc-jcm7Vendor Advisory

Published

Mar 31, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-30871OpenWrt Project is a Linux operating system targeting embedd…9.8
• CVE-2026-30872OpenWrt Project is a Linux operating system targeting embedd…9.8
• CVE-2026-30873OpenWrt Project is a Linux operating system targeting embedd…4.9
• CVE-2026-30874OpenWrt Project is a Linux operating system targeting embedd…7.8
• CVE-2026-30875Chamilo LMS is a learning management system. Prior to versio…8.8
• CVE-2026-30876Chamilo LMS is a learning management system. Prior to versio…5.3
• CVE-2026-30878baserCMS is a website development framework. Prior to versio…5.3
• CVE-2026-30879baserCMS is a website development framework. Prior to versio…6.1
• CVE-2026-3088Unauthenticated users on the local network can cause the rou…6.5
• CVE-2026-30880baserCMS is a website development framework. Prior to versio…9.8
• CVE-2026-30881Chamilo LMS is a learning management system. Version 1.11.34…8.8
• CVE-2026-30882Chamilo LMS is a learning management system. Chamilo LMS ver…6.1