CVE-2026-2058

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A flaw has been found in mathurvishal CloudClassroom-PHP-Project up to 5dadec098bfbbf3300d60c3494db3fb95b66e7be. This impacts an unknown function of the file /postquerypublic.php of the component Post Query Details Page. This manipulation of the argument gnamex causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Feb 6, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-205804.4In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already CVE-2026-205816.7In usb, there is a possible memory corruption due to use after free. This could lead to local escalation of privilege if a malicious actor hCVE-2026-205826.7In usb, there is a possible memory corruption due to double free. This could lead to local escalation of privilege if a malicious actor has CVE-2026-205834.4In usb, there is a possible system crash due to use after free. This could lead to local denial of service if a malicious actor has already CVE-2026-205846.7In usb, there is a possible memory corruption due to a missing bounds check. This could lead to local escalation of privilege if a maliciousCVE-2026-205857.5In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE CVE-2026-205868.8In vdec, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege with no adCVE-2026-205876.7In mtee, there is a possible escalation of privilege due to type confusion. This could lead to local escalation of privilege if a malicious CVE-2026-205886.7In mtee, there is a possible escalation of privilege due to a missing bounds check. This could lead to local escalation of privilege if a maCVE-2026-205896.7In venc, there is a possible out of bounds write due to type confusion. This could lead to local escalation of privilege if a malicious actoCVE-2026-20599.8A vulnerability has been found in SourceCodester Medical Center Portal Management System 1.0. Affected is an unknown function of the file /eCVE-2026-205904.4In display, there is a possible system crash due to a logic error. This could lead to local denial of service if a malicious actor has alrea
CVE-2026-2058: Critical severity, CVSS 9.8 | Vulnix