CVE-2026-5829

OVERVIEW CVE-2026-5829 is a SQL injection vulnerability identified in Simple IT Discussion Forum version 1.0. The flaw exists in the /pages/content.php file where the post_id parameter is inadequately sanitized, allowing attackers to inject malicious SQL commands into the application's database queries. SEVERITY The vulnerability carries a CVSS score of 7.3 (HIGH), indicating significant risk. It requires no authentication or user interaction for exploitation and is remotely accessible over the network. Successful exploitation could result in confidentiality, integrity, and availability impacts, as attackers could read, modify, or delete sensitive database information. EXPLOITATION STATUS Public exploit code has been disclosed for this vulnerability, though it is not currently listed on the CISA Known Exploited Vulnerabilities catalog. The EPSS score of 0.0004 suggests minimal real-world exploitation activity to date. Nevertheless, the availability of public exploits and the straightforward nature of SQL injection attacks warrant immediate patching of affected systems.