Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the file apps/home/controller/MemberController.php of the component Password Handler. The manipulation of the argument username/password/email/checkcode results in weak password recovery. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-12066 Weak Password Recovery in PbootCMS Up to 3.2.12 Password Handler https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-12066
Post summary
The post lists CVE-2026-12066 and describes it as a weak password recovery issue in PbootCMS, but offers no PoC, exploit details, active exploitation evidence, or remediation guidance.
CVE-2026-12066 A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the file apps/home/controller/MemberController.php o… https://www.cve.org/CVERecord?id=CVE-2026-12066
Post summary
The statement announces CVE-2026-12066 in PbootCMS (≤3.2.12) affecting the retrieve function in MemberController.php, but provides no PoC, exploit, patch, or active exploitation details.