An authenticated remote code execution (RCE) vulnerability in the admin_config.php component of seacms v13.6 allows attackers to execute arbitrary… (CVE-2026-79423)

The vulnerability identified as CVE-2026-79423 affects seacms v13.6 specifically in the admin_config.php component. It permits authenticated attackers to execute arbitrary code remotely by leveraging a crafted POST request. The vulnerability requires valid authentication, implying that an attacker must have access credentials to exploit this flaw. No CVSS score or detailed impact metrics are provided, and no patch or vendor advisory information is available to confirm remediation status.

Successful exploitation of this vulnerability could allow an authenticated attacker to execute arbitrary code on the affected system, potentially leading to full system compromise depending on the privileges of the exploited process. Since the vulnerability requires authentication, the attack surface is limited to users with access credentials. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the admin interface to trusted users only and monitor for suspicious activity related to POST requests targeting admin_config.php. Avoid exposing the admin interface to untrusted networks.