CVE-2026-7073Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 4 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in itsourcecode Construction Management System 1.0. This affects an unknown part of the file /execute.php. This manipulation of the argument code causes sql injection. The attack is possible to be carried out remotely. The exploit has been published and may be used.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 4 mentions across 1 observed day

What's happening

  • Technical details provided in 3 signals
  • Disclosure: 2 classified signals
  • General: 2 classified signals
  • 4 total mentions across 1 day

Deep dive

Activity timeline4 mentions / 1d
01234Mentions · 2026-04-27: 4Technical Details · 2026-04-27: 304-27
Signal classification2 categories
Disclosure
250.0%
General
250.0%
Referenced assets5 URLs
Full discourse4 posts
  • CVE@CVEnew
    General

    CVE-2026-7073 A flaw has been found in itsourcecode Construction Management System 1.0. This affects an unknown part of the file /execute.php. This manipulation of the argument code … https://www.cve.org/CVERecord?id=CVE-2026-7073

    Post summary

    The text references CVE-2026-7073 in a construction management system, but offers only vague information about the flaw and lacks any indication of exploitation, patches, or debunking. Accordingly it falls into a general disclosure category.

    00010106
    57.3K followersView on X
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-7073 📊 Severity: 7.3 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-7073 #CVE-2026-7073 #CVE #High #CyberSecurity #InfoSec https://t.co/BkseRRX5VA

    Post summary

    This tweet announces a new vulnerability CVE‑2026‑7073, noting a severity score of 7.3 and a high risk level, but provides no exploit code, patch information, or detailed technical description beyond the score.

    0000054
    141 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-7073 SQL Injection in itsourcecode Construction Management System 1.0 /execute... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7073 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3

    Post summary

    The tweet announces CVE‑2026‑7073, identifying it as a SQL Injection flaw in itsourcecode Construction Management System 1.0, and links to a Vulmon details page without providing PoC, exploit, or patch information.

    0000053
    4.0K followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-7073 A flaw has been found in itsourcecode Construction Management System 1.0. This affects an unknown part of the file /exe… CVSS 7.3 Full analysis → https://sec.kaitan.id/cves/CVE-2026-7073 #HP #CyberSecurity #InfoSec

    Post summary

    An analyst alerts to CVE-2026-7073, a high‑severity flaw (CVSS 7.3) affecting itsourcecode Construction Management System 1.0, with technical details but no exploitation or patch information.

    0000037
    142 followersView on X

Explore more