CVE-2026-16014
High · 7.3CVSS
7.3
EPSS
0.4%
Published
Jul 17, 2026
CISA due date
—
The record
A vulnerability was found in code-projects Hospital Bed Management System 1.0. This affects an unknown part of the component Login Form. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-121524 A flaw has been found in sumiie24 School-Management-System up to… CWE-74
- CVE-2026-121502 A vulnerability was identified in mathurvishal CloudClassroom-PHP-Project. CWE-74
- CVE-2026-115779 Effect is a TypeScript framework that consists of several packages that work together to… CWE-74
- CVE-2026-57154 OPNsense is a FreeBSD based firewall and routing platform. CWE-74
- CVE-2026-121260 A flaw has been found in Ziroom ZHOME A0101 1.0.1.0 Build 202004151405. CWE-74
- CVE-2026-120329 Saving the configuration of the mail backend module writes submitted settings to the page… CWE-74
- CVE-2026-120349 A security flaw has been discovered in dayrui XunRuiCMS up to 4.7.4. CWE-74
- CVE-2026-120348 A vulnerability was identified in dayrui XunRuiCMS up to 4.7.4. CWE-74