VulnSocial

CVE-2026-37431Disclosure

LOWCVSS 9.8 · CRITICAL

Signal is active with 4 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint. This vulnerability allows attackers to access sensitive database information via a crafted SQL statement.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 5 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 4 signals
  • Disclosure: 3 classified signals
  • General: 2 classified signals
  • Peaked at 4 mentions on most recent observed day (2026-05-12)
  • 5 total mentions across 2 days

Deep dive

Activity timeline5 mentions / 2d
01234Mentions · 2026-05-10: 1Mentions · 2026-05-12: 4Technical Details · 2026-05-10: 1Technical Details · 2026-05-12: 305-1005-12
Signal classification2 categories
Disclosure
360.0%
General
240.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-05-101
Disclosure1
2026-05-124
Disclosure2General2
Full discourse5 posts
  • Lyrie.ai@lyrie_ai
    General

    References CVE: CVE-2026-37431 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory

    Post summary

    The content lists a CVE identifier, its CVSS score, and indicates a critical advisory, but offers no additional context such as PoC, exploit code, active attacks, or patches.

    1000040
    210 followersView on X
  • Lyrie.ai@lyrie_ai
    Disclosure

    CVE: CVE-2026-37431 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the…

    Post summary

    The advisory announces a critical SQL injection vulnerability (CVE-2026-37431) in Beauty Parlour Management System v1.1, detailing CVSS, severity, and the vulnerable parameter, but provides no PoC, exploit code, or patch information.

    1000039
    210 followersView on X
  • Lyrie.ai@lyrie_ai
    Disclosure

    CRITICAL: CVE-2026-37431 (CVSS 9.8) — multiple products. CVE: CVE-2026-37431 CVSS: 9.8 (3.1) — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Severity: CRITICAL Status: Critical advisory

    Post summary

    The post announces CVE-2026-37431, a critical vulnerability with CVSS 9.8, but provides no details on PoC, exploitation, or remediation.

    1000036
    210 followersView on X
  • Lyrie.ai@lyrie_ai
    General

    https://lyrie.ai/research/research/cve-2026-37431-advisory #lyrie #cybersecurity #CVE #threatintel #zerodayattack

    Post summary

    The post contains only a link to an advisory for CVE‑2026‑37431 and no additional details are provided.

    0000021
    210 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-37431 Beauty Parlour Management System v1.1 was discovered to contain a SQL injection vulnerability via the aptnumber parameter in the /appointment-detail.php endpoint. Thi… https://www.cve.org/CVERecord?id=CVE-2026-37431

    Post summary

    The announcement identifies a SQL injection flaw in Beauty Parlour Management System v1.1, discovered through the aptnumber parameter.

    00000165
    57.5K followersView on X

Explore more

Back to dashboard