CyberRota
Back to database

CVE-2026-39111

HIGH · CVSS 7.5 EPSS 0.09% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-04-20 · Last synced: 2026-05-18

CyberRota Analysis

SQL Injection riski içeriyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-39111
Severity
HIGH
CVSS
7.5
EPSS
0.09%

Original NVD Description

SQL Injection vulnerability in Apartment Visitors Management System Apartment Visitors Management System V1.1 in the email parameter of the forgot password page (forgot-password.php). This allows an unauthenticated attacker to manipulate backend SQL queries and retrieve sensitive user data.