CVE-2025-57516: Publiccms

High severity, CVSS 8.2. EPSS: 1.1% chance of exploitation in the next 30 days.

OS Command injection vulnerability in PublicCMS PublicCMS-V5.202506.a, and PublicCMS-V5.202506.b allowing attackers to execute arbitrary commands via crafted DATABASE, USERNAME, or PASSWORD variables to the backupDB.bat file.

Affected products

• Publiccms Publiccms: version 5.202506.a only; version 5.202506.b only

Published 2025-09-29. Last modified 2026-06-17.