CVE-2026-19062

HighCVSS 7.3/10Last modified Oct 23, 2026

Description

A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipulation of the argument zuname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Aug 6, 2026
Last modified
Oct 23, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-190644.3A vulnerability was found in SourceCodester Online Examination & Learning Management System 1.0. This vulnerability affects unknown code of CVE-2026-190656.3A vulnerability was determined in SourceCodester Online Examination & Learning Management System 1.0. This issue affects some unknown procesCVE-2026-190664.3A vulnerability was identified in SourceCodester Online Examination & Learning Management System 1.0. Impacted is an unknown function of theCVE-2026-190676.3A security flaw has been discovered in itsourcecode Hospital Management System 1.0. The affected element is an unknown function of the file CVE-2026-190686.3A weakness has been identified in itsourcecode Hospital Management System 1.0. The impacted element is an unknown function of the file /treaCVE-2026-190696.3A security vulnerability has been detected in itsourcecode Hospital Management System 1.0. This affects an unknown function of the file /treCVE-2026-19077.5A SQL Injection (SQLi) affects the Kong Gateway (Enterprise and Open Source) clustering communication logic when operating in Hybrid Mode. TCVE-2026-190706.3A vulnerability was detected in itsourcecode Hospital Management System 1.0. This impacts an unknown function of the file /viewadmin.php. ThCVE-2026-190716.3A flaw has been found in itsourcecode Hospital Management System 1.0. Affected is an unknown function of the file /viewappointment.php. ThisCVE-2026-190729.9Velociraptor stores the compiled VQL in the hunt object internally to avoid having to recompile the artifacts for each endpoint in the hunt.CVE-2026-190735.3The Order Sync with Zendesk for WooCommerce WordPress plugin before 2.2.3 does not perform any capability check on one of its REST API endpoCVE-2026-190745.3The Advanced Classifieds & Directory Pro Advanced Classifieds & Directory Pro WordPress plugin before 3.4.3 (<= 3.4.2) is vulnerable to unau
CVE-2026-19062: High severity, CVSS 7.3 | Vulnix