CVE-2026-79423: n/a

This vulnerability exists in seacms v13.6 within the admin_config.php component. An attacker with authentication privileges can exploit this flaw by crafting a malicious POST request, resulting in remote code execution on the affected system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, and high impact on confidentiality, integrity, and availability. No known exploits in the wild or vendor patches are currently documented.

Successful exploitation allows an authenticated attacker to execute arbitrary code remotely, potentially leading to full system compromise including unauthorized data access, modification, or denial of service. The high CVSS score reflects the critical nature of this vulnerability.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the admin interface to trusted users only and monitor for suspicious POST requests targeting admin_config.php.