Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
baserCMS is a website development framework. Prior to version 5.2.3, a public mail submission API allows unauthenticated users to submit mail form entries even when the corresponding form is not accepting submissions. This bypasses administrative controls intended to stop form intake and enables spam or abuse via the API. This issue has been patched in version 5.2.3.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-30878 baserCMS is a website development framework. Prior to version 5.2.3, a public mail submission API allows unauthenticated users to submit mail form entries even when t… https://www.cve.org/CVERecord?id=CVE-2026-30878
Post summary
CVE-2026-30878 allows unauthenticated users to submit mail form entries via a public API in baserCMS versions older than 5.2.3; no PoC, patch, or evidence of active exploitation is provided.
⚡ New CVE Alert: CVE-2026-30878 📊 Severity: 5.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-30878 #CVE-2026-30878 #CVE #Medium #CyberSecurity #InfoSec https://t.co/KggNH2Zl61
Post summary
A tweet simply announces a CVE with a medium severity score, but provides no technical details, PoC, exploit, or patch information.
🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-30878 - baserCMS: Mail Form Acceptance Bypass via Public API Intel Report: https://ift.tt/5W1DAdY
Post summary
A newly disclosed vulnerability (CVE-2026-30878) in baserCMS permits bypass of mail form acceptance through the public API; the tweet links to an Intel report but provides no PoC, exploit tool, patch, or evidence of active exploitation.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | basercms | basercms | - | - | - |