Signal is active with 3 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-39319. Reason: This candidate is a duplicate of CVE-2026-39319. Notes: All CVE users should reference CVE-2026-39319 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.another CVE.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
CVE-2026-35566 ChurchCRM is an open-source church management system. Prior to 7.1.0, a critical SQL injection vulnerability exists in src/Reports/FundRaiserStatement.php where the $… https://www.cve.org/CVERecord?id=CVE-2026-35566
Post summary
CVE-2026-35566 is an unpatched critical SQL injection in ChurchCRM's FundRaiserStatement.php before version 7.1.0.
CVE-2026-35566 SQL Injection in ChurchCRM Prior to Version 7.1.0 via Unvalidated... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35566 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
The text announces a SQL injection vulnerability (CVE-2026-35566) in ChurchCRM versions before 7.1.0, providing a brief technical description and a link to details but no PoC, exploit, or patch information.
[CVE-2026-35566: HIGH] Critical SQL injection vulnerability in ChurchCRM prior to version 7.1.0 fixed. Unquoted numeric SQL context at risk. Upgrade to protect your data. #cybersecurity#cve,CVE-2026-35566,#cybersecurity https://cvefind.com/CVE-2026-35566
Post summary
The post warns that a high‑severity SQL injection vulnerability (CVE‑2026‑35566) in ChurchCRM has been fixed in version 7.1.0 and urges users to upgrade to protect their data.