CVE-2026-5961

HighCVSS 7.3/10Last modified Oct 26, 2026

Description

A security vulnerability has been detected in code-projects Simple IT Discussion Forum 1.0. This vulnerability affects unknown code of the file /topic-details.php. The manipulation of the argument post_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Metrics

CVSS 3.1 7.3/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weakness enumeration

CWE-74CWE-89

Affected software

VendorProductVersions
code-projectsSimple IT Discussion Forum1.0

References

Timeline

Published
Apr 9, 2026
Last modified
Oct 26, 2026
NVD status
Deferred

Related CVEs from 2026

CVE-2026-596117.5In multiple locations, there is a possible way to trigger a temporary denial of service via an integer overflow trap due to improper input vCVE-2026-596127.8In buffering_period of avc_decoder, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalatiCVE-2026-596137.5In multiple locations, there is a possible way to trigger an out of bounds read and temporary denial of service due to improper input validaCVE-2026-59614In multiple functions of oem_svc_setup.c, there is a possible way to dump secure cache lines into non-secure memory on warm reset due to a mCVE-2026-596167.8In prev_run_vcore of hwcodec_firmware, there is a possible Non-Heap Buffer Overflow due to a buffer overflow. This could lead to local escalCVE-2026-596184.0In smfc_v4l2_s_selection of smfc-v4l2-ioctls.c, there is a possible way to trigger an out of bounds read from adjacent shared memory buffersCVE-2026-596192.3In getCodecQp of GC2AV1Enc.cpp, there is a possible way to trigger an out of bounds read during quantization table lookup due to a missing bCVE-2026-59629.8A vulnerability was detected in Tenda CH22 1.0.0.6(468). This issue affects the function R7WebsSecurityHandlerfunction of the component httpCVE-2026-596237.5In CompareTelUris of SipAddress.cpp, there is a possible way to trigger an unhandled out of range exception and process crash due to an incoCVE-2026-596244.0In multiple locations, there is a possible way to trigger an out of bounds read via direct memory access in video decoder firmware due to a CVE-2026-596259.8In GetTwiddledMiptreeSparsePageMap of texmgmt.c, there is a possible way to trigger an out of bounds write due to a logic error. This could CVE-2026-596269.8In SendInfo of UssiController.cpp, there is a possible way to corrupt memory via a dangling connection listener pointer due to a use after f
CVE-2026-5961: High severity, CVSS 7.3 | Vulnix