CVE-2026-11510

2.1 lowEPSS 0.2%

Low (2.1). EPSS 0.2% chance of exploitation in the next 30 days.

A security flaw has been discovered in CodeAstro Leave Management System 1.0. This affects an unknown part of the file /admin/add_leave.php. Performing a manipulation of the argument type_of_leave results in sql injection. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

6.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.2% chance of exploitation in the next 30 days; higher than 9% of CVEs (scores of 2026-10-31)
CWEs: CWE-74, CWE-89
Published: 2026-06-08
Modified: 2026-07-23
Record from: the NVD, synced 2026-10-19

References

https://codeastro.com/
https://github.com/Andelstander/cve/issues/3
https://vuldb.com/cve/CVE-2026-11510
https://vuldb.com/submit/836789
https://vuldb.com/vuln/369130

Check your stack JSON