CVE-2026-37749 AKAOMA CVE VULNERABILITIES / 2h A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php.

Back cve.akaoma.com

CVE-2026-37749 AKAOMA CVE VULNERABILITIES / 2h A SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0 allows remote unauthenticated attackers to bypass authentication via the username parameter in index.php.

cve.akaoma.com • April 17, 2026

Share: View original

9.8 /10 Critical Risk As a catastrophic security flaw, CVE-2026-37749 has severe implications, demanding immediate intervention.

As a catastrophic security flaw, CVE-2026-37749 has severe implications, demanding immediate intervention.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical SQL Injection Vulnerability in CodeAstro Attendance System (CVE-2026-37749) A critical SQL injection vulnerability, identified as CVE-2026-37749, has been discovered in CodeAstro Simple Attendance Management System v1.0. This flaw allows remote unauthenticated attackers to bypass authentication through the username parameter in index.php, potentially granting unauthorized access to sensitive attendance records. The vulnerability can be exploited over the network without user interaction, making it particularly dangerous. A proof-of-concept exploit has been released, and a CVSS score of 9.8 indicates its critical nature. Immediate patching is recommended, and if patches cannot be applied, restricting network access to trusted sources is advised. The vulnerability was published on April 17, 2026, and has no confirmed exploitation reports as of now. Security professionals are urged to implement input validation and monitor database logs for suspicious activities. 1 sources 78

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (1)

CWE-89 - SQL Injection

Platforms (1)

CodeAstro Simple Attendance Management System