Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-78032

SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege.

Description

SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Tsuyoshi Saito SOY CMS

Default version status: unaffected

  • 0 to ≤ 3.24.0affected

References