CVE-2026-15558General

LOWCVSS 2.1 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in CodeAstro Simple Online Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /SimpleOnlineLeave/admin/deletemp.php. Such manipulation of the argument ID leads to sql injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 1 classified signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-13); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-13: 1Mentions · 2026-07-14: 1Technical Details · 2026-07-14: 107-1307-14
Signal classification2 categories
General
150.0%
Disclosure
150.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-07-131
General1
2026-07-141
Disclosure1
Full discourse2 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-15558 SQL Injection in CodeAstro Simple Online Leave Management System 1.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-15558 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3

    Post summary

    The post announces a SQL Injection vulnerability (CVE-2026-15558) affecting CodeAstro Simple Online Leave Management System 1.0, linking to a vulnerability details page but offering no PoC, patch, or active exploitation information.

    0000097
    4.1K followersView on X
  • MalwareObserver@MalwareObserver
    General

    🐛 VULNERABILITIES CVE Notify: 🚨 [CVE-2026-15558](https://codeastro.com/) A security vulnerability has been detected in CodeAstro ... https://codeastro.com/ #PatchManagement #Vulnerability #CVE

    Post summary

    The post simply alerts that CVE-2026-15558 has been detected in CodeAstro, but provides no additional vulnerability or exploitation details.

    0000037
    10 followersView on X

Explore more