VulnSocial

CVE-2026-93959Disclosure

LOWCVSS 5.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admins/assessments/course/btn_functions.php. This manipulation of the argument Course causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-74CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-20); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-20: 1Mentions · 2026-10-26: 1PoC Mentioned / Linked · 2026-10-26: 1Patch / Workaround · 2026-10-26: 1Technical Details · 2026-09-20: 1Technical Details · 2026-10-26: 109-2010-26
Signal classification2 categories
Disclosure
150.0%
PoC
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-201
Disclosure1
2026-10-261
PoC1
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-93959 A vulnerability was determined in SourceCodester Online Reviewer Management System 1.0. This issue affects some unknown processing of the file /reviewer_0/admins/asse… https://www.cve.org/CVERecord?id=CVE-2026-93959

    Post summary

    The text discloses CVE-2026-93959 affecting SourceCodester Online Reviewer Management System 1.0, noting unknown processing of an admin file path, but provides no exploit, PoC, patch, or active exploitation details beyond a link to the CVE record.

    00010891
    58.1K followersView on X
  • Hugo | DevOps | Cybersecurity@HugoValters
    PoC

    CVE-2026-93959: SQL injection in SourceCodester Online Reviewer Management System 1.0 via the Course argument in btn_functions.php. CVSS 7.3, remote, public exploit, no patch. Update immediately or restrict access. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-93959/ #SourceCodester #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker

    Post summary

    The tweet discloses CVE-2026-93959, a remote SQL injection in SourceCodester Online Reviewer Management System 1.0, highlighting that a public exploit exists and no patch is available, while suggesting access restriction as a mitigation.

    0000038
    1.1K followersView on X

Explore more

Back to dashboard