CVE-2026-11486Disclosure

LOWCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch affected systems immediately
Hunt for exploitation attempts and persistence artifacts

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /archive1.php. Performing a manipulation of the argument sy results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Back to dashboard

2.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Exploit tooling references are present in monitored signal
Patch or workaround signal is available
3 mentions across 2 observed days
Momentum state: stable

What's happening

Exploit tool or code specified in 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-06-08); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification3 categories

Disclosure

133.3%

General

133.3%

Exploit

133.3%

Referenced assets2 URLs

By indicator

Classification over time

Date	Total	Labels

2026-06-08	2	Disclosure1General1
2026-06-10	1	Exploit1

Full discourse3 posts

DFIR Lab@DFIR_Lab134d
Exploit
🚨 HIGH: CVE-2026-11486 (CVSS 7.3) - SQL Injection in SourceCodester Class & Exam Timetabling System 1.0. Remote exploit PUBLIC. File: /archive1[.]php, parameter: sy. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/TGO91E9uhB
Post summary
CVE‑2026‑11486 is a SQL injection flaw in SourceCodester Class & Exam Timetabling System 1.0 with a publicly available remote exploit targeting /archive1.php’s sy parameter; rushing to apply the patch is strongly advised.
0000048
43 followersView on X
CVE@CVEnew136d
General
CVE-2026-11486 A vulnerability was detected in SourceCodester Class and Exam Timetabling System 1.0. Affected by this vulnerability is an unknown functionality of the file /archive1… https://www.cve.org/CVERecord?id=CVE-2026-11486
Post summary
The snippet merely notes the existence of CVE-2026-11486 for SourceCodester Class and Exam Timetabling System 1.0 without providing any substantive details, exploit information, or mitigation steps.
00000180
57.6K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds136d
Disclosure
CVE-2026-11486 SQL Injection in SourceCodester Class and Exam Timetabling System 1.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11486
Post summary
A brief disclosure of CVE‑2026‑11486 that identifies an SQL injection flaw in SourceCodester Class and Exam Timetabling System 1.0, accompanied by a link to a vulnerability details page.
0000042
4.0K followersView on X

Explore more

Back to dashboard