What is CVE-2026-11509?

CVE-2026-11509 is a publicly disclosed cybersecurity vulnerability with a MEDIUM severity rating and CVSS score of 5.3.

How to search for CVE vulnerabilities?

You can search the 4nuxd CVE database using CVE IDs, vendor names, product names, or severity levels.

CVE-2026-11509

MEDIUM5.3/ 10.0

Published: June 8, 2026 at 12:16 PM

Modified: June 17, 2026 at 10:14 AM

Source: cna@vuldb.com

Vulnerability Description

A vulnerability was identified in CodeAstro Leave Management System 1.0. Affected by this issue is some unknown functionality of the file /admin/search_staff_for_updation.php. Such manipulation of the argument Name leads to sql injection. The attack may be performed from remote.

CVSS Metrics

Base Score

5.3

Severity

MEDIUM

Vector String

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X