CVE-2026-29861Disclosure

LOWCVSS 9.8 · CRITICAL

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • Discloure: 1 classified signal
  • Peaked at 2 mentions on most recent observed day (2026-04-11)
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-10: 1Mentions · 2026-04-11: 2Technical Details · 2026-04-10: 1Technical Details · 2026-04-11: 204-1004-11
Signal classification2 categories
Disclosure
266.7%
Discloure
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-101
Discloure1
2026-04-112
Disclosure2
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-29861 PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php. https://www.cve.org/CVERecord?id=CVE-2026-29861

    Post summary

    The post announces a newly discovered SQL injection flaw in PHP-MYSQL-User-Login-System v1.0, detailing the vector but not providing any PoC or exploit code.

    00010197
    57.1K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-29861 PHP-MYSQL-User-Login-System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at login.php. https://www.cve.org/CVERecord?id=CVE-2026-29861 ----- Traducción: CVE-2026-29861 PHP-MYSQL-User-Login-System v1.0 fue descu… http://infoflow.cloud`

    Post summary

    The post announces CVE‑2026‑29861, a SQL injection flaw in a PHP/MySQL login system, without providing PoC, exploit code, or mitigation details.

    0000036
    71 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Discloure

    CVE-2026-29861 SQL Injection Vulnerability in PHP-MYSQL-User-Login-System v1.0 Login https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-29861

    Post summary

    This brief notice announces CVE-2026-29861 as an SQL injection vulnerability affecting PHP‑MYSQL‑User‑Login‑System v1.0. No PoC, patch, or exploitation evidence is provided.

    0000040
    4.0K followersView on X

Explore more