CVE-2026-8097Active Exploitation

LOWCVSS 2.1 · LOW

Exploitation ongoing with high activity in latest observed window (1 mentions)

Immediate actions

Prioritize remediation for affected systems immediately
Assume compromise if assets are exposed
Track advisory updates for patch or workaround availability

Recommended action window: Immediate (within 24h)

NVD description

A security flaw has been discovered in CodeAstro Online Classroom 1.0. This vulnerability affects unknown code of the file /askquery.php. The manipulation of the argument squeryx results in sql injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks.

Back to dashboard

3.5/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-74CWE-89

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

Active exploitation appears in 1 classified signals
1 mentions across 1 observed day

What's happening

Active exploitation reported across 1 signal
Technical details provided in 1 signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

Active Exploitation

1100.0%

Referenced assets1 URL

By indicator

https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8097

Full discourse1 post

Vulmon Vulnerability Feed@VulmonFeeds153d
Active Exploitation
CVE-2026-8097 SQL Injection in CodeAstro Online Classroom 1.0 /askquery.php (Exploitation Reported) https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8097
Post summary
The brief notice indicates that CVE‑2026‑8097, a SQL injection flaw in CodeAstro Online Classroom 1.0, is currently being exploited in the wild, yet it provides no PoC, exploit code, patch, or mitigation guidance.
0000052
4.0K followersView on X

Explore more

Back to dashboard