CVE-2026-65875
Possible ATT&CK Techniques 1AI
T1190 · Exploit Public-Facing ApplicationAffected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| baserCMS Users Community | BaserCMS | < 5.3.0 | affected |
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-65875
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
BaserCMS provided by baserCMS Users Community contains a CSV file injection vulnerability. If a user downloads and opens a CSV file containing malicious code injected by an attacker, the malicious code may be executed.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:L
Source: CVE Program / CVE List V5
Vulnerability Type
CWE-1236
Source: CVE Program / CVE List V5
Vulnerability Title
basercms 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
baserCMS是baserCMS团队开源的一套企业级内容管理系统(CMS)。 basercms 5.3.0之前版本存在输入验证错误漏洞，该漏洞源于CSV文件注入，用户下载并打开包含攻击者注入的恶意代码的CSV文件时可能导致恶意代码执行。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| baserCMS Users Community | BaserCMS | 0 ~ 5.3.0 | - |
II. Public POCs for CVE-2026-65875
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-65875
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-65875 (2)
IV. Related Vulnerabilities
Same product: BaserCMS
- CVE-2026-32734
baserCMS: Multiple vulnerabilities in baserCMS - CVE-2026-30879
baserCMS: Cross-site scripting vulnerability in blog post - CVE-2026-30940
baserCMS: Path Traversal in Theme File API Leads to Arbitrar - CVE-2026-30878
baserCMS: Mail Form Acceptance Bypass via Public API - CVE-2026-30877
baserCMS: OS Command Injection in the baserCMS Update Functi
Same weakness: CWE-1236
- CVE-2026-18738
Shlink CSV Formula Injection via Visit Export CLI - CVE-2026-54243
Statamic: CSV formula injection in form submission exports - CVE-2026-14846
Incorrect neutralisation in the PrestaShop firmware - CVE-2026-55452
Snipe-IT: CSV formula injection in Activity Report export - CVE-2026-50179
Actual: CSV Formula Injection in Transaction Export via Impo
V. Comments for CVE-2026-65875
No comments yet