VulnSocial

CVE-2026-14642Disclosure

LOWCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /edit_class2.php. The manipulation of the argument ID leads to sql injection. The attack is possible to be carried out remotely. The exploit is publicly available and might be used.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-07-04); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-07-04: 2Mentions · 2026-07-06: 1PoC Mentioned / Linked · 2026-07-06: 1Patch / Workaround · 2026-07-06: 1Technical Details · 2026-07-06: 107-0407-06
Signal classification3 categories
Disclosure
133.3%
General
133.3%
Patch
133.3%
Referenced assets2 URLs
By indicator
Classification over time
DateTotalLabels
2026-07-042
Disclosure1General1
2026-07-061
Patch1
Full discourse3 posts
  • DFIR Lab@DFIR_Lab
    Patch

    🚨 HIGH: CVE-2026-14642 (CVSS 7.3) - SQL Injection in SourceCodester Class & Exam Timetabling System 1.0. Exploit publicly available. Patch immediately or disable /edit_class2[.]php endpoint. #CVE #PatchNow #ThreatIntel https://t.co/ztIHdq1hOR

    Post summary

    The tweet reports CVE-2026-14642 as a high‑severity SQL injection in SourceCodester Class & Exam Timetabling System 1.0, warns that the exploit is publicly available, and urges users to patch or disable the vulnerable endpoint.

    0000060
    64 followersView on X
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-14642 A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /edit_class2.… https://www.cve.org/CVERecord?id=CVE-2026-14642 ----- Traducción: CVE-2026-14642 Se … http://infoflow.cloud`

    Post summary

    The post provides a brief alert about CVE-2026-14642 affecting SourceCodester Class and Exam Timetabling System 1.0, pointing to the CVE record but offering no deeper technical, exploitation, or patch information.

    0000032
    91 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-14642 A vulnerability was identified in SourceCodester Class and Exam Timetabling System 1.0. Affected by this issue is some unknown functionality of the file /edit_class2.… https://www.cve.org/CVERecord?id=CVE-2026-14642

    Post summary

    The post announces the identification of CVE-2026-14642 in SourceCodester Class and Exam Timetabling System 1.0, without providing further technical or actionable details.

    00000756
    57.7K followersView on X

Explore more

Back to dashboard