CVE-2026-5579

CodeAstro Online Classroom version 1.0 contains a SQL injection vulnerability in the updatedetailsfromfaculty.php file parameter handler, specifically within the fname argument, that could allow an authenticated attacker to execute arbitrary SQL commands. The vulnerability has a CVSS score of 6.3 (Medium) with a network attack vector, low complexity, and no user interaction required, resulting in potential unauthorized access, modification, and disruption of confidential data. Although the exploit has been publicly disclosed, the vulnerability is not currently listed on the Known Exploited Vulnerabilities catalog and shows minimal community engagement with an EPSS score indicating it ranks lower than approximately 99.99% of CVEs in terms of exploitation likelihood. Organizations running CodeAstro Online Classroom 1.0 should prioritize patching this authentication-required remote vulnerability, though the low exploitation probability suggests it is not an immediate critical threat compared to other vulnerabilities in the threat landscape.