cbcvebase.
CVE-2025-57516
published 2025-09-29

CVE-2025-57516: OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b allowing attackers to execute arbitrary commands via crafted…

PriorityP258high8.2CVSS 3.1
AVNACLPRNUINSUCLIHAN
EPSS
1.15%
62.8th percentile
OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b allowing attackers to execute arbitrary commands via crafted DATABASE, USERNAME, or PASSWORD variables to the backupDB.bat file.

Affected

2 ranges
VendorProductVersion rangeFixed in
publiccmspubliccms——
publiccmspubliccms——
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.