CVE-2026-12066

PbootCMS Password MemberController.php retrieve password recovery

CVSS 6.9 MEDIUMEPSS 0.3%CWE-640

Vexday Risk Score

33Attention

SSVC decision (CISA)

Attend

PoC available → attend closely

CVSS 6.9EPSS 0.3%KEV nãoPoC públicaNuclei —Metasploit —Patch —

Lifecycle

12 Jun 2026Published on NVD

Recommendation: Plan a near-term fix — a public PoC already exists.

A security flaw has been discovered in PbootCMS up to 3.2.12. This vulnerability affects the function retrieve of the file apps/home/controller/MemberController.php of the component Password Handler. The manipulation of the argument username/password/email/checkcode results in weak password recovery. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks.

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

n/a · PbootCMS

public PoCs found — 1

cve_referencegithub.com/yunyan05/MYCVE/tree/main/PbootCMS/V3.2.12-Account-Takeoverunverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://github.com/pbootcmspro/PbootCMS/issues/38 https://github.com/yunyan05/MYCVE/tree/main/PbootCMS/V3.2.12-Account-Takeover https://vuldb.com/cve/CVE-2026-12066 https://vuldb.com/submit/828374 https://vuldb.com/vuln/370561 https://vuldb.com/vuln/370561/cti