CVE-2026-5960

CVE-2026-5960 is a vulnerability in code-projects Patient Record Management System version 1.0 affecting the SQL Database Backup File Handler component. The weakness resides in the /db/hcpms.sql backup file and enables unauthorized information disclosure through database manipulation. The vulnerability presents a medium-severity risk with a CVSS score of 4.3. It is network-accessible, requires no authentication or special privileges, and can be exploited remotely with low attack complexity. However, user interaction is required for successful exploitation, and the impact is limited to confidentiality breaches with no integrity or availability consequences. Exploit code has been publicly released, escalating the risk of opportunistic attacks. However, the vulnerability is not currently tracked on the Known Exploited Vulnerabilities list and shows low community attention based on the inactive hot list status. The EPSS score of 0.00034 indicates minimal probability of exploitation in the wild relative to other CVEs, suggesting limited immediate threat despite public exploit availability.