CVE-2026-7126Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the file /ajax.php?action=save_category. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-04-27: 3Technical Details · 2026-04-27: 204-27
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-7126 SQL Injection in SourceCodester Pharmacy Sales and Inventory System 1.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-7126

    Post summary

    The text announces a SQL injection vulnerability (CVE‑2026‑7126) in SourceCodester Pharmacy Sales and Inventory System 1.0, offering minimal details and no PoC, exploit, or patch information.

    0000037
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-7126 A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown part of the file /ajax.php?action=save_category. … https://www.cve.org/CVERecord?id=CVE-2026-7126

    Post summary

    A new CVE-2026-7126 vulnerability in SourceCodester Pharmacy Sales and Inventory System 1.0 has been disclosed, affecting an unspecified part of /ajax.php?action=save_category, but no further technical or exploit details are provided.

    0000083
    57.3K followersView on X
  • Kaitan ID Security@KaitanSecurity
    General

    ⚠️ HIGH — CVE-2026-7126 A security flaw has been discovered in SourceCodester Pharmacy Sales and Inventory System 1.0. This affects an unknown … CVSS 7.3 Full analysis → https://sec.kaitan.id/cves/CVE-2026-7126 #HP #CyberSecurity #InfoSec

    Post summary

    An unknown vulnerability with CVSS 7.3 was disclosed for SourceCodester Pharmacy Sales and Inventory System 1.0, but no PoC, exploit, patch, or active exploitation details are provided.

    0000043
    141 followersView on X

Explore more