CVE-2026-4574

CVE-2026-4574 describes a SQL injection vulnerability in SourceCodester Simple E-learning System 1.0, affecting the User Profile Update Handler through manipulation of the `firstName` argument. This is a medium-severity vulnerability (CVSS 6.3) that allows a remote attacker with low privileges to achieve low impact on confidentiality, integrity, and availability with low attack complexity. Although an exploit is publicly available, it is not found in common exploit databases like Metasploit or ExploitDB. There is currently no evidence of active exploitation, it is not in the CISA KEV catalog, and community attention is minimal, reflected by a very low EPSS score.