Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-39334. Reason: This candidate is a duplicate of CVE-2026-39334. Notes: All CVE users should reference CVE-2026-39334 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.another CVE.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
CVE-2026-39317 ChurchCRM is an open-source church management system. Prior to 7.1.0, a SQL injection vulnerability exists in ChurchCRM's SettingsIndividual.php where user-controlled… https://www.cve.org/CVERecord?id=CVE-2026-39317
Post summary
The note announces a SQL injection flaw in ChurchCRM's SettingsIndividual.php for versions prior to 7.1.0.
[CVE-2026-39317: HIGH] Critical SQL injection vulnerability fixed in ChurchCRM 7.1.0. Ensure systems are updated to prevent unauthorized access and data extraction. #cybersecurity#cve,CVE-2026-39317,#cybersecurity https://cvefind.com/CVE-2026-39317
Post summary
The post announces a critical SQL injection vulnerability (CVE-2026-39317) in ChurchCRM, now fixed in version 7.1.0, and urges users to update to mitigate unauthorized data access.