CVE-2026-6007Disclosure

LOWCVSS 2.1 · LOW

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /del.php. The manipulation of the argument equipname results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-04-10); latest day: 1
  • 3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-04-10: 2Mentions · 2026-04-11: 1Technical Details · 2026-04-10: 1Technical Details · 2026-04-11: 104-1004-11
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-102
Disclosure1General1
2026-04-111
Disclosure1
Full discourse3 posts
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-6007 📊 Severity: 6.3 🚨 Risk Level: Medium 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-6007 #CVE-2026-6007 #CVE #Medium #CyberSecurity #InfoSec https://t.co/GT8HZj8xPV

    Post summary

    A concise announcement of a new CVE (CVE-2026-6007) describing its severity score and risk level but lacking deeper technical or exploit details.

    0000035
    125 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-6007 A vulnerability was found in itsourcecode Construction Management System 1.0. This affects an unknown function of the file /del.php. The manipulation of the argument eq… https://www.cve.org/CVERecord?id=CVE-2026-6007

    Post summary

    The tweet reports the discovery of CVE-2026-6007 in Construction Management System 1.0, noting an unknown function in /del.php and argument manipulation, but provides no detailed technical info, exploit code, or remediation details.

    00000103
    57.0K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-6007 SQL Injection in itsourcecode Construction Management System 1.0 /del.php https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6007

    Post summary

    CVE-2026-6007 is disclosed as an SQL injection flaw in itsourcecode Construction Management System 1.0 (/del.php); no PoC, exploitation, or patch information is provided.

    0000036
    4.0K followersView on X

Explore more