Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
baserCMS is a website development framework. Prior to version 5.2.3, there is an OS command injection vulnerability in the update functionality. Due to this issue, an authenticated user with administrator privileges in baserCMS can execute arbitrary OS commands on the server with the privileges of the user account running baserCMS. This issue has been patched in version 5.2.3.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-03-31 | 4 | Disclosure2General1Patch1 |
| 2026-04-02 | 2 | Disclosure1Patch1 |
⚡ New CVE Alert: CVE-2026-30877 📊 Severity: 9.1 🚨 Risk Level: Critical 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-30877 #CVE-2026-30877 #CVE #Critical #CyberSecurity #InfoSec https://t.co/zFfZ55wngU
Post summary
The tweet merely announces the existence of CVE-2026-30877, noting its severity, but offers no technical or remediation details.
🚨 CVE-2026-30877: baserCMS: OS Co... Admin-to-RCE via update function - classic CWE-78 in CMS land where privileged users become system-level attackers. #RCE #CMSsec #CWE78. https://zerodaysignal.com/vulnerability/CVE-2026-30877 #netsec #vulnerability #CVE #sysadmin #zeroday
Post summary
CVE‑2026‑30877 discloses an OS command injection flaw in baserCMS’s admin‑update function that enables remote execution (CWE‑78). The tweet links to a vulnerability page but does not provide explicit exploit code or evidence of active exploitation.
`baserCMS` update functionality is vulnerable to OS Command Injection (CVE-2026-30877). Potential for server compromise. Monitor vendor advisories for a fix. #baserCMS #OSCommandInjection #infosec https://www.pulsepatch.io/posts/cve-2026-30877-basercms-os-command-injection
Post summary
baserCMS’s update feature is susceptible to OS Command Injection (CVE‑2026‑30877), potentially allowing server compromise; users should await vendor patches.
CVE-2026-30877 baserCMS is a website development framework. Prior to version 5.2.3, there is an OS command injection vulnerability in the update functionality. Due to this issue, an… https://www.cve.org/CVERecord?id=CVE-2026-30877
Post summary
This post announces an OS command injection vulnerability in baserCMS update functionality before version 5.2.3, giving technical detail but no PoC, exploit code, or mitigation information.
[CVE-2026-30877: CRITICAL] Critical security update for baserCMS! An OS command injection vulnerability in update functionality pre-version 5.2.3 allows arbitrary commands execution. Update now to stay safe.#cve,CVE-2026-30877,#cybersecurity https://cvefind.com/CVE-2026-30877
Post summary
The message announces a critical OS command injection flaw in baserCMS (CVE-2026-30877) and urges users to apply the latest update to mitigate the risk.
🔴 CVE-2026-30877 - Critical baserCMS is a website development framework. Prior to version 5.2.3, there is an OS command injection vulnerability in the update functionality. Due to this issue, an authenticated user w... https://www.thehackerwire.com/vulnerability/CVE-2026-30877/ https://t.co/oyJeyqINh4
Post summary
The tweet is an announcement of CVE-2026-30877, describing it as a critical OS command injection flaw in baserCMS’s update feature that exists before version 5.2.3, without providing PoC, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | basercms | basercms | - | - | - |