CVE-2026-7072General

LOWCVSS 5.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was detected in CodePanda Source canteen_management_system 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

  • 4 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 3 signals
  • General: 3 classified signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 3 mentions (2026-04-27); latest day: 1
  • 4 total mentions across 2 days

Deep dive

Activity timeline4 mentions / 2d
01223Mentions · 2026-04-27: 3Mentions · 2026-06-04: 1Technical Details · 2026-04-27: 2Technical Details · 2026-06-04: 104-2706-04
Signal classification2 categories
General
375.0%
Disclosure
125.0%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-04-273
Disclosure1General2
2026-06-041
General1
Full discourse4 posts
  • Joey Romaine 🇺🇸 |=★=|@Tank23x0
    General

    CVE-2026-7072 is a good patch-discipline check. Affected systems / SQL injection. Public details are enough to start scoping. What would you check first if this hit your stack?

    Post summary

    The post references CVE-2026-7072 as a SQL injection vulnerability, noting public details suffice for scoping, but it provides no PoC, exploit code, active exploitation evidence, or patch information.

    1000048
    309 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-7072 A vulnerability was detected in CodePanda Source canteen_management_system 1.0. Affected by this issue is some unknown functionality of the file /api/login.php. The man… https://www.cve.org/CVERecord?id=CVE-2026-7072

    Post summary

    A brief notice of CVE-2026-7072 affecting CodePanda's canteen_management_system 1.0, highlighting an unspecified issue in /api/login.php, without providing further technical or mitigation details.

    00010108
    57.3K followersView on X
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-7072 📊 Severity: 7.3 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-7072 #CVE-2026-7072 #CVE #High #CyberSecurity #InfoSec https://t.co/AsVi8oKnQ2

    Post summary

    The tweet publicises CVE‑2026‑7072, mentioning its CVSS score of 7.3 and high risk, but does not provide exploit details, patches, or other actionable information.

    0000049
    141 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-7072 SQL Injection in CodePanda Source canteen_management_system 1.0 /api/login.php https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7072

    Post summary

    The post discloses that CVE‑2026‑7072 is an SQL injection vulnerability in CodePanda's canteen_management_system 1.0 (api/login.php) with no further exploit, patch, or activity details.

    0000049
    4.0K followersView on X

Explore more