CVE-2026-15537Active Exploitation

MEDIUMCVSS 5.5 · MEDIUM

Exploitation ongoing with high activity in latest observed window (3 mentions)

Immediate actions

Patch affected systems immediately
Assume compromise if assets are exposed

Recommended action window: Immediate (within 24h)

NVD description

A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file admin/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

Back to dashboard

4.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

MEDIUM

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Active exploitation appears in 1 classified signals
Patch or workaround signal is available
3 mentions across 1 observed day

What's happening

Active exploitation reported across 1 signal
Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
General: 1 classified signal
3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d

Signal classification3 categories

Active Exploitation

133.3%

Disclosure

133.3%

General

133.3%

Referenced assets2 URLs

By indicator

Full discourse3 posts

CVE@CVEnew91d
Disclosure
CVE-2026-15537 A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file admin/login.php. The manipulat… https://www.cve.org/CVERecord?id=CVE-2026-15537
Post summary
A new vulnerability was identified in SourceCodester Online Book Store System 1.0’s admin/login.php, but the announcement lacks detailed technical specifics, exploit availability, or patch information.
00020463
58.1K followersView on X
Infoflowcloud@infoflowcloud91d
General
🚨*CVE* CVE-2026-15537 A security flaw has been discovered in SourceCodester Online Book Store System 1.0. This vulnerability affects unknown code of the file admin/login.php. The manipulat… https://www.cve.org/CVERecord?id=CVE-2026-15537 ----- Traducción: CVE-2026-15537 Se … http://infoflow.cloud`
Post summary
The message announces CVE-2026‑15537 for SourceCodester Online Book Store System 1.0 and links to the CVE record, but offers no further technical, exploit, or patch details.
0000032
92 followersView on X
DFIR Lab@DFIR_Lab91d
Active Exploitation
🚨 HIGH: CVE-2026-15537 (CVSS 7.3) - SQL Injection in SourceCodester Online Book Store System 1.0 (admin/login[.]php). Publicly exploited. Patch immediately. #CVE #PatchNow https://t.co/N2nWD7cSUp
Post summary
CVE-2026-15537 is a SQL Injection flaw in SourceCodester Online Book Store System 1.0 that is reportedly being exploited in the wild; a patch is urgently needed.
0000050
71 followersView on X

Explore more

Back to dashboard