VulnSocial

CVE-2026-6031Disclosure

LOWCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. This affects an unknown function of the file /add-category-function.php. Such manipulation of the argument Category leads to sql injection. The attack can be executed remotely. The exploit has been disclosed to the public and may be used.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 3 mentions across 3 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • Peaked 2d ago at 1 mentions (2026-04-10); latest day: 1
  • 3 total mentions across 3 days

Deep dive

Activity timeline3 mentions / 3d
00111Mentions · 2026-04-10: 1Mentions · 2026-04-11: 1Mentions · 2026-04-20: 1PoC Mentioned / Linked · 2026-04-20: 1Patch / Workaround · 2026-04-20: 1Technical Details · 2026-04-20: 104-1004-1104-20
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-04-101
Disclosure1
2026-04-111
Disclosure1
2026-04-201
Patch1
Full discourse3 posts
  • Giuseppe Paternicola@giuseppe_1337
    Patch

    🚨 HIGH severity CVE-2026-6031 (CVSS 7.3): SQL injection in Simple IT Discussion Forum 1.0 via /add-category-function[.]php. Remotely exploitable, exploit public. Patch immediately. #CVE #Vulnerability #PatchNow https://t.co/EYpOmUsitJ

    Post summary

    The tweet announces a high‑severity SQL injection vulnerability (CVE‑2026‑6031) in Simple IT Discussion Forum 1.0, notes that a public exploit exists, and urges users to apply a patch immediately.

    0000055
    26 followersView on X
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-6031 📊 Severity: 7.3 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-6031 #CVE-2026-6031 #CVE #High #CyberSecurity #InfoSec https://t.co/XnEn3PVTgo

    Post summary

    The tweet announces CVE‑2026‑6031 as a newly discovered vulnerability with a CVSS score of 7.3 and an overall high risk level, affecting multiple, unspecified products.

    0000039
    125 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-6031 A vulnerability has been found in code-projects Simple IT Discussion Forum 1.0. This affects an unknown function of the file /add-category-function.php. Such manipulati… https://www.cve.org/CVERecord?id=CVE-2026-6031

    Post summary

    The text announces the discovery of CVE-2026-6031 in Simple IT Discussion Forum 1.0 but provides no technical, exploit, or remediation details.

    0000077
    57.0K followersView on X

Explore more

Back to dashboard