Threats tagged 'ghsa-4qq3-3jrp-49qg'

CVE-2026-65548 is a critical remote code execution vulnerability in Muffingroup Betheme versions up to and including 28.4.2. It involves improper control of code generation (CWE-94), allowing a contributor-level user to execute arbitrary code remotely without user interaction. The vulnerability has a very high CVSS score of 9.9, indicating severe impact on confidentiality, integrity, and availability.