CVE-2026-37347

CriticalCVSS 9.1/10Last modified Nov 11, 2026

Related CVEs from 2026

CVE-2026-37359.8A vulnerability has been found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this vulnerability is an unknown functiCVE-2026-37369.8A vulnerability was found in code-projects Simple Flight Ticket Booking System 1.0. Affected by this issue is some unknown functionality of CVE-2026-37376.3A vulnerability was determined in SourceCodester Pet Grooming Management Software 1.0. This affects an unknown part of the file add_user.phpCVE-2026-37386.3A vulnerability was identified in SourceCodester Pet Grooming Management Software 1.0. This vulnerability affects unknown code of the componCVE-2026-37396.3A security flaw has been discovered in suitenumerique messages 0.2.0. This issue affects the function ThreadAccessSerializer of the file srcCVE-2026-37409.8A weakness has been identified in itsourcecode University Management System 1.0. Impacted is an unknown function of the file /admin_search_sCVE-2026-37415.4A security vulnerability has been detected in YiFang CMS 2.0.5. The affected element is the function update of the file app/db/admin/D_frienCVE-2026-37425.4A vulnerability was detected in YiFang CMS 2.0.5. The impacted element is the function update of the file app/db/admin/D_singlePage.php. PerCVE-2026-374286.5qihang-wms commit 75c15a was discovered to contain a SQL injection vulnerability via the datascope parameter in the SysDeptMapper.xml file. CVE-2026-374296.5qihang-wms commit 75c15a was discovered to contain a SQL injection vulnerability via the datascope parameter in the SysUserMapper.xml file. CVE-2026-37435.4A flaw has been found in YiFang CMS 2.0.5. This affects the function update of the file app/db/admin/D_singlePageGroup.php. Executing a maniCVE-2026-374307.3An arbitrary file upload vulnerability in the ShopOrderImportController.java component of qihang-wms commit 75c15a allows attackers to execu
CVE-2026-37347: Critical severity, CVSS 9.1 | Vulnix