CVE-2026-6167Disclosure

LOWCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (3 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was detected in code-projects Faculty Management System 1.0. Impacted is an unknown function of the file /subject-print.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit is now public and may be used.

2.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 3 mentions across 1 observed day

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-04-13: 3PoC Mentioned / Linked · 2026-04-13: 1Patch / Workaround · 2026-04-13: 1Technical Details · 2026-04-13: 204-13
Signal classification2 categories
Disclosure
266.7%
Patch
133.3%
Referenced assets2 URLs
Full discourse3 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-6167 A vulnerability was detected in code-projects Faculty Management System 1.0. Impacted is an unknown function of the file /subject-print.php. The manipulation of the arg… https://www.cve.org/CVERecord?id=CVE-2026-6167

    Post summary

    The post announces CVE‑2026‑6167 in the Faculty Management System, noting an impacted function in /subject‑print.php but offering no proof‑of‑concept, exploitation details, or mitigations.

    00000109
    57.1K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-6167 SQL Injection in code-projects Faculty Management System 1.0 via ID Parameter https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-6167

    Post summary

    Vulnerability disclosed: SQL Injection in Faculty Management System 1.0 via ID parameter; no PoC, exploit, or patch information reported.

    0000043
    4.0K followersView on X
  • Giuseppe Paternicola@giuseppe_1337
    Patch

    🚨 HIGH: CVE-2026-6167 (CVSS 7.3) - SQL Injection in Faculty Management System 1.0 (/subject-print[.]php). Remotely exploitable, no auth required. Public exploit available. Patch immediately. #CVE #Vulnerability #PatchNow #ThreatIntel https://t.co/khS38zhPp8

    Post summary

    The tweet highlights CVE-2026-6167, a remote, unauthenticated SQL injection in Faculty Management System 1.0, notes that a public exploit exists, and urges users to patch immediately.

    0000050
    25 followersView on X

Explore more