CVE-2026-36872 is a SQL injection vulnerability affecting Sourcecodester Basic Library System v1.0 in the /librarysystem/load_book.php file. This weakness allows attackers to manipulate database queries through malicious input, potentially compromising data integrity and confidentiality within the affected application. The vulnerability is classified as low severity with a CVSS score of 2.7, requiring high-level privileges and network access to exploit, with limited impact restricted to confidentiality loss. There is no evidence of active exploitation in the wild, as the vulnerability is not listed on the Known Exploited Vulnerabilities catalog and remains inactive on exploit tracking lists. The extremely low EPSS score of 0.00026 indicates minimal practical risk, and the limited community attention suggests this legacy system may have a small user base or limited deployment footprint.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
1.0CPE matchmatch criteria | cpe:2.3:a:razormist:basic_library_system:1.0:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.0 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.