Cpe:2.3:a:easycms:easycms:*:*:*:*:*:*:*:*

CVE-2026-3786 is a high-severity SQL injection vulnerability in Easycms version 1.6 and earlier that allows remote attackers to execute arbitrary database commands via the _order parameter.