Signal is active with 2 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2026-39326. Reason: This candidate is a duplicate of CVE-2026-39326. Notes: All CVE users should reference CVE-2026-39326 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.another CVE.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
NONE
CVE-2026-39323 ChurchCRM is an open-source church management system. Prior to 7.1.0, a critical SQL injection vulnerability exists in ChurchCRM's PropertyTypeEditor.php where the Na… https://www.cve.org/CVERecord?id=CVE-2026-39323
Post summary
The post reveals a critical SQL injection flaw in ChurchCRM prior to version 7.1.0, referencing the CVE but providing no exploit, patch, or active attack details.
[CVE-2026-39323: HIGH] Critical SQL injection vulnerability in ChurchCRM's PropertyTypeEditor.php pre 7.1.0 enables authenticated users to execute arbitrary SQL commands. Update to 7.1.0 to fix.#cve,CVE-2026-39323,#cybersecurity https://cvefind.com/CVE-2026-39323
Post summary
The tweet announces a critical SQL injection in ChurchCRM, highlights the affected files, and advises updating to version 7.1.0 to remediate the issue.