VulnSocial

CVE-2026-94035Disclosure

LOWCVSS 2.1 · LOW

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

  • Patch affected systems immediately
  • Hunt for exploitation attempts and persistence artifacts
  • Increase monitoring for publicly documented tradecraft

Recommended action window: High priority (within 72h)

NVD description

A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drug_recommender/index.php. Executing a manipulation of the argument full name can lead to cross site scripting. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Back to dashboard
2.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-79CWE-94

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Public PoC is present in monitored signal
  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • PoC mentioned or linked in 1 signal
  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 2 signals
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-09-20); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-09-20: 1Mentions · 2026-10-20: 1PoC Mentioned / Linked · 2026-10-20: 1Patch / Workaround · 2026-10-20: 1Technical Details · 2026-09-20: 1Technical Details · 2026-10-20: 109-2010-20
Signal classification2 categories
Disclosure
150.0%
PoC
150.0%
Referenced assets2 URLs
Classification over time
DateTotalLabels
2026-09-201
Disclosure1
2026-10-201
PoC1
Full discourse2 posts
  • Hugo | DevOps | Cybersecurity@HugoValters
    PoC

    CVE-2026-94035: reflected XSS in SourceCodester Drug Recommendation System 1.0 via full name field in index.php, CVSS 4.3, public exploit, no patch yet. Filter input and update when a fix lands. #CVE #infosec #cybersecurity https://www.valtersit.com/cve/CVE-2026-94035 #SourceCodester #CVEALERT #CVE #infosec #Linux #XSS #valtersit #snippet #SysAdmin #cybersecurity #devsecops #devops #developer #100daysofcode #git #github #gitlab #redteam #blueteam #ethicalhacker #cybersecurityawareness #cybersecuritynews #cybersecuritytips #python #hacker #kali #ubuntu #debian #docker

    Post summary

    The tweet announces CVE-2026-94035, a reflected XSS (CVSS 4.3) in SourceCodester Drug Recommendation System 1.0, notes a public exploit is available, provides a link to details, and recommends input filtering and updating when a patch becomes available.

    0000036
    1.1K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-94035 A vulnerability was determined in SourceCodester Drug Recommendation System 1.0. Impacted is an unknown function of the file /drug_recommender/index.php. Executing a … https://www.cve.org/CVERecord?id=CVE-2026-94035

    Post summary

    The tweet announces the existence of CVE-2026-94035 in the SourceCodester Drug Recommendation System 1.0, identifying the affected file and component. It provides basic technical details but lacks PoC references, exploit specifics, active exploitation claims, or remediation guidance.

    000001.5K
    58.1K followersView on X

Explore more

Back to dashboard