Skip to content

CVE-2026-86732

CVE

Threat entity extracted from intelligence sources

Frequency
1
occurrences
First Seen
September 9, 2026
Last Seen
September 9, 2026
API
Exploited in Wild
—
Ransomware Use
—
Public Exploits
—
Attack Vector
—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Two Remote Code Execution Vulnerabilities Disclosed in Content Management Systems57.1

Two critical vulnerabilities were disclosed on September 8, 2026, affecting content management systems. CVE-2026-86732, rated 8.7 (High), impacts Craft CMS versions before 5.10.12, allowing authenticated users to execute arbitrary PHP code via the element-index endpoint. Attackers can exploit this b...

Public Exploits

Checking GitHub for proof-of-concept code…

CVE Details

Related Entities

Zero-day ExploitCWE-502 - Deserialization Of Untrusted DataT1059 - Command and Scripting InterpreterT1190 - Exploit Public-Facing ApplicationT1203 - Exploitation for Client ExecutionCraft CMSPHP