CVE-2026-78032: Tsuyoshi Saito Soy CMS

Critical severity, CVSS 9.3. EPSS: 0.6% chance of exploitation in the next 30 days.

SOY CMS contains an issue with deserialization of untrusted data. An arbitrary code may be executed by an attacker with the web server privilege.

Affected products

• Tsuyoshi Saito Soy CMS: up to and including 3.24.0

Published 2026-08-28. Last modified 2026-08-28.