CVE-2026-36962Disclosure

LOWCVSS 7.3 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthenticated attacker to compromise the entire database, achieve unauthorized administrative access, and potentially gain remote code execution by writing malicious files to the server's file system via the keyword parameter in the /index/controller/Search.php endpoint.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

Technical details provided in 2 signals
Disclosure: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

Disclosure

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud149d
Disclosure
🚨*CVE* CVE-2026-36962 SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthenticated attacker to compromise the entire database, achieve unauthorized administrative access, and poten… https://www.cve.org/CVERecord?id=CVE-2026-36962 ----- Traducción: CVE-2026-36962 iny… http://infoflow.cloud`
Post summary
CVE‑2026‑36962 is a newly disclosed SQL Injection flaw in MuuCMF T6 that could allow full database takeover by an unauthenticated attacker. No PoC, exploit tools, or patch information is provided, nor is there evidence of active exploitation.
0000036
77 followersView on X
CVE@CVEnew149d
Disclosure
CVE-2026-36962 SQL Injection in MuuCMF T6 v1.9.4.20260115 allows an unauthenticated attacker to compromise the entire database, achieve unauthorized administrative access, and poten… https://www.cve.org/CVERecord?id=CVE-2026-36962
Post summary
The tweet reports a newly disclosed SQL Injection vulnerability in MuuCMF T6 that allows unauthenticated attackers to fully compromise the database and gain administrative access.
00000192
57.5K followersView on X

Explore more

Back to dashboard