CVE-2026-5665PoC

LOWCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Patch affected systems immediately
Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A security vulnerability has been detected in code-projects Online FIR System 1.0. Affected by this vulnerability is an unknown functionality of the file /Login/checklogin.php of the component Login. The manipulation of the argument email/password leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used.

Back to dashboard

2.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

Public PoC is present in monitored signal
Patch or workaround signal is available
2 mentions across 2 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 2 signals
Patch or workaround mentioned in 1 signal
Technical details provided in 2 signals
Exploit: 1 classified signal
Peaked 1d ago at 1 mentions (2026-04-06); latest day: 1
2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d

Signal classification2 categories

PoC

150.0%

Exploit

150.0%

Referenced assets1 URL

By indicator

https://nvd.nist.gov/vuln/detail/CVE-2026-5665

Classification over time

Date	Total	Labels

2026-04-06	1	PoC1
2026-04-28	1	Exploit1

Full discourse2 posts

White Rabbitx 🏴‍☠️@TheRabbitPy184d
PoC
🛑 CVE-2026-5665 – Online FIR System 1.0 SQL injection in /Login/checklogin.php (email/password). Unauthenticated SQLi against the login endpoint, public exploit available. If this app is internet‑facing in any form, treat as compromised until proven otherwise. Details: https://nvd.nist.gov/vuln/detail/CVE-2026-5665
Post summary
The tweet announces a public exploit for CVE‑2026‑5665, describing it as an unauthenticated SQL injection, but does not provide a link or exploitation tool details, nor does it mention patches or active attacks.
2003053
1.4K followersView on X
Giuseppe Paternicola@giuseppe_1337163d
Exploit
🚨 HIGH: CVE-2026-5665 (CVSS 7.3) - SQL injection in code-projects Online FIR System 1.0 /Login/checklogin[.]php. Remotely exploitable, public exploit available. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/SmLaVm6mZy
Post summary
CVE-2026-5665 is a high‑severity SQL injection with a publicly available exploit; a patch is urgently required.
0000055
27 followersView on X

Explore more

Back to dashboard