CVE-2026-86282

A weakness has been identified in jaychouchannel Tourism-Management-System up to 8122bf020d91199eddfff3ee02d1632a70a9a132. Affected is an unknown function of the file travel/src/main/java/com/controller/CommonController.java of the component CommonDao. Executing a manipulation of the argument table/column/xColumn/yColumn can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. This patch is called d44ec3aa0bd2a72c8800e3befb0a9a96a6491b86. A patch should be applied to remediate this issue.

• CWE-74
• CWE-89

• https://github.com/jaychouchannel/Tourism-Management-System/
• https://github.com/jaychouchannel/Tourism-Management-System/commit/d44ec3aa0bd2a72c8800e3befb0a9a96a6491b86
• https://github.com/jaychouchannel/Tourism-Management-System/pull/14
• https://github.com/jaychouchannel/Tourism_Management_System/issues/7
• https://vuldb.com/cve/CVE-2026-86282
• https://vuldb.com/submit/905639
• https://vuldb.com/vuln/399443
• https://vuldb.com/vuln/399443/cti

Published

Sep 7, 2026

Last Modified

Sep 8, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-86277A vulnerability has been found in SourceCodester Syllabus-Al…7.3
• CVE-2026-86278A vulnerability was found in SourceCodester Syllabus-Aligned…4.3
• CVE-2026-86279A vulnerability was determined in SourceCodester Syllabus-Al…6.3
• CVE-2026-8628The EntreDroppers plugin for WordPress is vulnerable to Refl…6.1
• CVE-2026-86280A vulnerability was identified in SourceCodester Syllabus-Al…5.3
• CVE-2026-86281A security flaw has been discovered in SourceCodester Syllab…4.3
• CVE-2026-86283MISP's UiBeta theme collection view (app/View/Themed/UiBeta/…7.1
• CVE-2026-86284A security vulnerability has been detected in jaychouchannel…5.3
• CVE-2026-86285A vulnerability was detected in BookStack up to 26.05.2. Aff…4.3
• CVE-2026-86287Net::IP::LPM versions before 1.12 for Perl accept malformed …7.5
• CVE-2026-86288A vulnerability has been found in ModelCloud GPTQModel up to…6.3
• CVE-2026-86289A vulnerability was found in Ollama up to 0.31.1. This issue…4.3