VulnSocial

CVE-2026-5827General

MEDIUMCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Impacted is an unknown function of the file /question-function.php. The manipulation of the argument content leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Back to dashboard
4.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-74CWE-89

Priority

MEDIUM

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC and exploit tooling are both present
  • Patch or workaround signal is available
  • 5 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Exploit tool or code specified in 1 signal
  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • General: 3 classified signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 4 mentions (2026-04-09); latest day: 1
  • 5 total mentions across 2 days

Deep dive

Activity timeline5 mentions / 2d
01234Mentions · 2026-04-09: 4Mentions · 2026-04-18: 1PoC Mentioned / Linked · 2026-04-18: 1Exploit Tool / Code · 2026-04-18: 1Patch / Workaround · 2026-04-18: 1Technical Details · 2026-04-09: 1Technical Details · 2026-04-18: 104-0904-18
Signal classification3 categories
General
360.0%
Disclosure
120.0%
Patch
120.0%
Referenced assets4 URLs
Classification over time
DateTotalLabels
2026-04-094
Disclosure1General3
2026-04-181
Patch1
Full discourse5 posts
  • Giuseppe Paternicola@giuseppe_1337
    Patch

    🚨 HIGH SEVERITY: CVE-2026-5827 (CVSS 7.3) SQL Injection in Simple IT Discussion Forum 1.0 (/question-function[.]php). Remotely exploitable, public exploit available. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/Bn3Ng7Nmj2

    Post summary

    SQL injection vulnerability (CVE-2026-5827) in Simple IT Discussion Forum 1.0 with a known exploit and CVSS 7.3; immediate patch recommended.

    0000055
    25 followersView on X
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-5827 📊 Severity: 7.3 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-5827 #CVE-2026-5827 #CVE #High #CyberSecurity #InfoSec https://t.co/WaFVFGN4Sw

    Post summary

    The post alerts to CVE-2026-5827 with a severity of 7.3 but lacks any detailed technical, exploit, or mitigation information.

    0000044
    123 followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-5827 A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Impacted is an unknown function of the file /question-function.php. The manipulation of … https://www.cve.org/CVERecord?id=CVE-2026-5827 ----- Traducción: CVE-2026-5827 Se … http://infoflow.cloud`

    Post summary

    The tweet announces CVE‑2026‑5827 as a newly discovered issue in Simple IT Discussion Forum 1.0, noting an unknown function in /question‑function.php, but provides no further technical or exploit details.

    0000036
    67 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-5827 A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. Impacted is an unknown function of the file /question-function.php. The manipulation of … https://www.cve.org/CVERecord?id=CVE-2026-5827

    Post summary

    The text briefly announces CVE-2026-5827 for a Simple IT Discussion Forum but offers no technical, exploit, or mitigation details.

    00000293
    57.0K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-5827 SQL Injection in Simple IT Discussion Forum 1.0 via Content Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5827

    Post summary

    The entry merely reports an SQL injection flaw in Simple IT Discussion Forum 1.0 with no further exploitation, patch, or PoC details.

    0000045
    4.0K followersView on X

Explore more

Back to dashboard