CVE-2026-3785

CVE-2026-3785 affects EasyCMS up to 1.6. The vulnerability is in an unknown function in /RbacnodeAction.class.php (Request Parameter Handler); manipulating the _order argument triggers remote SQL injection. An exploit is publicly available. Remediation guidance from connected sources suggests res...