CVE-2026-6166Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in code-projects Vehicle Showroom Management System 1.0. This issue affects some unknown processing of the file /util/UpdateVehicleFunction.php. The manipulation of the argument VEHICLE_ID leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed publicly and may be used.

Back to dashboard

0.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

NONE

Threat summary

Patch or workaround signal is available
2 mentions across 1 observed day

What's happening

Patch or workaround mentioned in 1 signal
Technical details provided in 1 signal
Disclosure: 1 classified signal
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification2 categories

Disclosure

150.0%

Patch

150.0%

Referenced assets1 URL

By indicator

https://www.cve.org/CVERecord?id=CVE-2026-6166

Full discourse2 posts

CVE@CVEnew177d
Disclosure
CVE-2026-6166 A security vulnerability has been detected in code-projects Vehicle Showroom Management System 1.0. This issue affects some unknown processing of the file /util/UpdateV… https://www.cve.org/CVERecord?id=CVE-2026-6166
Post summary
The text announces a new vulnerability (CVE-2026-6166) in Vehicle Showroom Management System 1.0 affecting unknown processing of the file /util/UpdateV, but provides no further technical details or remediation information.
00010120
57.1K followersView on X
Giuseppe Paternicola@giuseppe_1337178d
Patch
🚨 CVE-2026-6166 | CVSS 7.3 HIGH SQL Injection in Vehicle Showroom Management System 1.0 (/util/UpdateVehicleFunction[.]php). Remotely exploitable, exploit public. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel #DFIR https://t.co/KiSktPbNLJ
Post summary
The tweet alerts to a high‑severity SQL injection in Vehicle Showroom Management System 1.0 with a public exploit, urging users to patch immediately.
0000051
25 followersView on X

Explore more

Back to dashboard