CVE-2026-97150 - baserCMS Arbitrary File Read and Deletion via Unsafe Deserialization
CVE ID :CVE-2026-97150 Published : Sept. 30, 2026, 7:12 a.m. | 1 hour, 3 minutes ago Description :When converting baserCMS4-style addons to baserCMS5-style ones, BcAddonMigrator includes "config.php" from the addon, which means the PHP code in the file is executed. Arbitrary files on the...