CVE-2026-14754Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. Affected is an unknown function of the file /admin/add_room.php. Executing a manipulation of the argument delete_image/edit/description/number/price/rooms/type can lead to sql injection. The attack can be launched remotely. The exploit has been published and may be used.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Patch or workaround signal is available
3 mentions across 2 observed days
Momentum state: stable

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Disclosure: 3 classified signals
Peaked 1d ago at 2 mentions (2026-07-05); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-07-05	2	Disclosure2
2026-07-06	1	Disclosure1

Full discourse3 posts

Hugo | DevOps | Cybersecurity 🇱🇻@HugoValters92d
Disclosure
#CVE-2026-14754 - #SQLi in code-projects #Hotel and #Tourism Reservation 1.0. Remote exploit available. #CVSS 7.3. Unpatched. Update or mitigate immediately. #CVEAlert #infosec #cybersecurity #devsecops #devops #developers #git #github #gitlab #cybernews #linux https://www.valtersit.com/cve/CVE-2026-14754
Post summary
The post announces CVE-2026-14754, a high-severity SQL injection in Hotel and Tourism Reservation 1.0, and urges immediate patching. No exploit code or active exploitation claims are provided, so it is a disclosure notice.
0001086
974 followersView on X
CVE@CVEnew93d
Disclosure
CVE-2026-14754 A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. Affected is an unknown function of the file /admin/add_room.php. Executing a manipulation of… https://www.cve.org/CVERecord?id=CVE-2026-14754
Post summary
A new flaw in code-projects Hotel and Tourism Reservation 1.0 is disclosed, but no further exploit or mitigation details are provided.
00010764
57.7K followersView on X
Infoflowcloud@infoflowcloud93d
Disclosure
🚨*CVE* CVE-2026-14754 A flaw has been found in code-projects Hotel and Tourism Reservation 1.0. Affected is an unknown function of the file /admin/add_room.php. Executing a manipulation of… https://www.cve.org/CVERecord?id=CVE-2026-14754 ----- Traducción: Se ha encontrado u… http://infoflow.cloud`
Post summary
A new vulnerability CVE‑2026‑14754 in Hotel and Tourism Reservation 1.0 has been disclosed, affecting an unknown function in /admin/add_room.php, but no PoC, exploit, or patch information is included.
0000034
91 followersView on X

Explore more

Back to dashboard