CVE-2026-5847

CVE-2026-5847 is an information disclosure vulnerability affecting code-projects Movie Ticketing System version 1.0, specifically in the SQL Database Backup File Handler component that processes the /db/moviedb.sql file. The vulnerability allows unauthorized access to sensitive information through an unknown function within the affected component. The vulnerability carries a CVSS 3.1 score of 4.3 (Medium severity) with a network-based attack vector requiring no authentication but necessitating user interaction. The attack has low complexity and results in confidentiality impact limited to the affected system, with no integrity or availability concerns. The FAUCET Risk Score of 30.0 out of 100 indicates moderate concern within the broader vulnerability landscape. Exploitation status shows the vulnerability is not currently tracked in the Known Exploited Vulnerabilities catalog and is not on active threat lists, suggesting limited real-world exploitation at present. However, exploit details have been publicly disclosed, creating a potential pathway for future attacks. The extremely low EPSS score of 0.00034 indicates this vulnerability ranks lower than most known CVEs in terms of predicted exploitation probability, though security teams should remain vigilant given the public disclosure of technical details.