CVE-2026-6000

CVE-2026-6000 affects code-projects Online Library Management System version 1.0, specifically a SQL database backup file handler component. An unknown function within the /sql/library.sql file contains a vulnerability that allows remote attackers to disclose sensitive information through manipulation of the backup file. This vulnerability requires minimal attack complexity and user interaction, making it relatively straightforward to exploit. The vulnerability carries a CVSS score of 4.3 (Medium severity) with a network-based attack vector requiring no privileges but user interaction. The impact is limited to confidentiality breach with no integrity or availability concerns. The EPSS score of 0.00034 indicates very low probability of exploitation in the wild relative to other CVEs, and the FAUCET risk score of 30.0/100 further reflects moderate overall risk. Although exploit code has been made publicly available, there is currently no evidence of active exploitation in the field. The vulnerability is not listed on the Known Exploited Vulnerabilities catalog and remains inactive on security community hot lists. Organizations running affected versions should prioritize patching based on their data sensitivity, but this does not represent an immediate critical threat.