CVE-2026-7744

A vulnerability was found in CodeAstro Online Classroom 1.0. This affects an unknown function of the file /OnlineClassroom/addnewstudent. The manipulation of the argument fname results in sql injection. The attack may be performed from remote. The exploit has been made public and could be used.

• CWE-74
• CWE-89

• https://codeastro.com/
• https://github.com/yuji0903/silver-guide/issues/21
• https://vuldb.com/submit/807696
• https://vuldb.com/vuln/360919
• https://vuldb.com/vuln/360919/cti

Published

May 4, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-77422JLine is a Java library for handling console input. From 3.0…7.5
• CVE-2026-77423JLine is a Java library for handling console input. From 3.0…7.5
• CVE-2026-77425Unleash is an open-source feature management platform. Prior…4.3
• CVE-2026-77426Unleash is an open-source feature management platform. Prior…7.1
• CVE-2026-7743A vulnerability has been found in CodeAstro Online Classroom…6.3
• CVE-2026-77438Trilium is an open-source hierarchical note-taking applicati…7.5
• CVE-2026-7745A vulnerability was determined in CodeAstro Online Classroom…6.3
• CVE-2026-77454Incorrect Authorization vulnerability in ash-project ash_sql…5.9
• CVE-2026-7746A vulnerability was identified in SourceCodester Web-based P…6.3
• CVE-2026-77465toml-node is a TOML parser for Node.js and the browser. Prio…7.5
• CVE-2026-7747A security flaw has been discovered in Totolink N300RH 3.2.4…9.8
• CVE-2026-7748A weakness has been identified in Totolink N300RH 3.2.4-B202…8.8