CVE-2026-36387

MEDIUM

CODEASTRO Membership Management System 1.0 - Remote Code Execution

Title source: manual

Description

A Remote Code Execution vulnerability was found in CODEASTRO Membership Management System v1.0 in /add_members.php. This vulnerability affects the file upload functionality, where improper file sanitization allows attackers to inject malicious files which leads RCE.

References (2)

Core 2

Core References

http://codeastro.com

https://github.com/raneishajustin/CVE/tree/main/CVE-2026-36387

View Writeup ZIP pw:eip

Scores

CVSS v3 6.5

EPSS 0.0027

EPSS Percentile 18.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-434

Status published

Published May 07, 2026

Tracked Since May 07, 2026