CVE-2026-5565

CVE-2026-5565 is a SQL injection vulnerability in Simple Laundry System version 1.0, specifically in the /delmemberinfo.php file's userid parameter handler. The vulnerability allows attackers to manipulate this parameter to execute arbitrary SQL commands against the application's database. The vulnerability carries a CVSS score of 7.3 (HIGH), with a network-based attack vector requiring no authentication, low complexity, and no user interaction. The impact is moderate, affecting confidentiality, integrity, and availability through potential data exposure, modification, or system disruption. Exploitation appears limited at present. While proof-of-concept exploit code has been publicly disclosed, the vulnerability is not currently listed on the CISA Known Exploited Vulnerabilities (KEV) catalog and shows no indication of active exploitation in the wild. The EPSS score of 0.000390 suggests low probability of exploitation within the next 30 days, and it remains inactive on the Hot List, indicating minimal community attention or real-world abuse at this time.