VulnSocial

CVE-2026-7075Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 5 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A vulnerability was found in itsourcecode Construction Management System 1.0. This issue affects some unknown processing of the file /locations.php. Performing a manipulation of the argument address results in sql injection. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 5 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 3 classified signals
  • General: 2 classified signals
  • 5 total mentions across 1 day

Deep dive

Activity timeline5 mentions / 1d
01345Mentions · 2026-04-27: 5Technical Details · 2026-04-27: 204-27
Signal classification2 categories
Disclosure
360.0%
General
240.0%
Referenced assets4 URLs
Full discourse5 posts
  • CVE@CVEnew
    General

    CVE-2026-7075 A vulnerability was found in itsourcecode Construction Management System 1.0. This issue affects some unknown processing of the file /locations.php. Performing a manipu… https://www.cve.org/CVERecord?id=CVE-2026-7075

    Post summary

    The passage announces the discovery of CVE-2026-7075 in itsourcecode Construction Management System 1.0, noting an issue with the /locations.php file, but provides no further technical, patch, or exploitation details.

    0001097
    57.3K followersView on X
  • White Rabbitx 🏴‍☠️@TheRabbitPy
    Disclosure

    🏗️ CVE-2026-7075 — itsourcecode Construction Management System 1.0 is vulnerable to SQL injection in /locations.php, where the address parameter can be abused. Location and address fields are often overlooked but still reach sensitive queries. https://nvd.nist.gov/vuln/detail/CVE-2026-7075

    Post summary

    The post announces CVE‑2026‑7075, a SQL injection flaw in itsourcecode Construction Management System 1.0, providing basic technical details but no evidence of exploitation, patches, or PoC.

    1000039
    1.1K followersView on X
  • CVEarity@CVEarity
    Disclosure

    ⚡ New CVE Alert: CVE-2026-7075 📊 Severity: 7.3 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-7075 #CVE-2026-7075 #CVE #High #CyberSecurity #InfoSec https://t.co/J16X3HLDOS

    Post summary

    The tweet announces CVE‑2026‑7075 as a high‑risk vulnerability with a CVSS score of 7.3, but provides no details on exploitation, mitigation, or technical specifics.

    0000049
    141 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    General

    CVE-2026-7075 SQL Injection in itsourcecode Construction Management System 1.0 /locations.php https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7075

    Post summary

    The announcement identifies a SQL injection flaw in Construction Management System 1.0 targeting /locations.php, but offers no PoC, exploitation details, or mitigation guidance.

    0000045
    4.0K followersView on X
  • Kaitan ID Security@KaitanSecurity
    Disclosure

    ⚠️ HIGH — CVE-2026-7075 A vulnerability was found in itsourcecode Construction Management System 1.0. This issue affects some unknown processin… CVSS 7.3 Full analysis → https://sec.kaitan.id/cves/CVE-2026-7075 #HP #CyberSecurity #InfoSec

    Post summary

    The tweet announces CVE-2026-7075 in Construction Management System 1.0 with a CVSS 7.3 score, providing only a brief disclosure and a link to a full analysis, but no technical or exploit details.

    0000040
    142 followersView on X

Explore more

Back to dashboard