CVE-2026-60036 is a vulnerability that allows a high privileged remote attacker to perform code injection via the backends patch activate function, potentially leading to full system compromise including loss of confidentiality, integrity, and availability.