CVE-2026-11559

A vulnerability was detected in CodeAstro Payroll System 1.0. This affects an unknown function of the file /view_account.php. The manipulation of the argument ID results in sql injection. The attack may be performed from remote. The exploit is now public and may be used.

• CWE-74
• CWE-89

• https://codeastro.com/
• https://github.com/Andelstander/cve/issues/1
• https://vuldb.com/cve/CVE-2026-11559
• https://vuldb.com/submit/836791
• https://vuldb.com/vuln/369169
• https://vuldb.com/vuln/369169/cti

Published

Jun 8, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11553A vulnerability was found in Tenda HG7HG9 and HG10 300001138…8.8
• CVE-2026-11554A vulnerability was determined in TOTOLINK CP450 4.1.0cu.747…4.3
• CVE-2026-11555A vulnerability was identified in D-Link DGS-1100-08PD 1.00.…7.5
• CVE-2026-11556A security flaw has been discovered in Tenda F451 1.0.0.7/1.…8.8
• CVE-2026-11557A weakness has been identified in Tenda F451 1.0.0.7/1.0.0.9…8.8
• CVE-2026-11558A security vulnerability has been detected in CodeAstro Payr…6.3
• CVE-2026-1156A vulnerability was determined in Totolink LR350 9.3.5u.6369…8.8
• CVE-2026-11561Improper neutralization of special elements used in an expre…9.8
• CVE-2026-11562The WS Form LITE WordPress plugin before 1.11.8 does not ha…4.3
• CVE-2026-11563The Word Count and Social Shares WordPress plugin through 1.…9.6
• CVE-2026-11564libcurl keeps previously used connections in a connection po…9.1
• CVE-2026-11565The Advanced File Manager WordPress plugin before 5.4.13 do…8.5