CVE-2026-5837

A vulnerability was found in PHPGurukul News Portal Project 4.1. This affects an unknown part of the file /news-details.php. The manipulation of the argument Comment results in sql injection. The attack can be launched remotely. The exploit has been made public and could be used.

• CWE-74
• CWE-89

• https://github.com/f1rstb100d/CVE/issues/25
• https://phpgurukul.com/
• https://vuldb.com/submit/789775
• https://vuldb.com/vuln/356293
• https://vuldb.com/vuln/356293/cti

Published

Apr 9, 2026

Last Modified

Jul 24, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-5832A weakness has been identified in atototo api-lab-mcp up to …7.3
• CVE-2026-5833A security vulnerability has been detected in awwaiid mcp-se…5.3
• CVE-2026-5834A vulnerability was detected in code-projects Online Shoe St…2.4
• CVE-2026-5835A flaw has been found in code-projects Online Shoe Store 1.0…2.4
• CVE-2026-5836A vulnerability has been found in code-projects Online Shoe …2.4
• CVE-2026-58369Woodpecker before 3.15.0 registers the /api/orgs/lookup/*org…6.9
• CVE-2026-58370Woodpecker before 3.15.0 matches the ApprovalAllowedUsers by…9.2
• CVE-2026-58371SeaweedFS before 4.30 reflects the callback query parameter …3.1
• CVE-2026-58372SeaweedFS before 4.34 contains a path traversal vulnerabilit…8.1
• CVE-2026-58373CVAT before 2.69.0 contains an improper authorization vulner…5.3
• CVE-2026-58374In hostapd before 2.12, a missing bounds check in AP-mode Wi…7.1
• CVE-2026-58375JimuReport through 2.5.0 exposes the POST /jmreport/auto/exp…8.7