CVE-2026-37749

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

April 17, 2026

Last Seen

April 17, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical SQL Injection Vulnerability in CodeAstro Attendance System (CVE-2026-37749)78.0

A critical SQL injection vulnerability, identified as CVE-2026-37749, has been discovered in CodeAstro Simple Attendance Management System v1.0. This flaw allows remote unauthenticated attackers to bypass authentication through the username parameter in index.php, potentially granting unauthorized a...