PatchSiren

PatchSiren cyber security CVE debrief

CVE-2026-108926 itsourcecode CVE debrief

A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0, specifically in the ebaptism.php file, which is vulnerable to SQL injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. Defenders should assess exposure and prioritize verification and potential remediation. The vulnerability requires verification of exposure and potential remediation to prevent attacks. The system's network exposure should be assessed and software version reviewed if necessary.

Vendor
itsourcecode
Product
Baptism Information Management System
CVSS
MEDIUM 5.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-10-12
Original CVE updated
2026-10-12
Advisory published
2026-10-12
Advisory updated
2026-10-12

Who should care

Defenders responsible for the Baptism Information Management System 1.0 should assess exposure to SQL injection attacks and prioritize verification and potential remediation. Operators, administrators, and security teams should review the system's vulnerability and take necessary actions to prevent exploitation. The system's network exposure should be assessed and software version reviewed if necessary to prevent attacks.

Why it matters

The SQL injection vulnerability in itsourcecode Baptism Information Management System 1.0 requires verification of exposure and potential remediation to prevent attacks.

  • Verify exposure of Baptism Information Management System 1.0 to SQL injection attacks
  • Assess the system's network exposure
  • Review and update the system's software version if necessary

Technical summary

The itsourcecode Baptism Information Management System 1.0 is vulnerable to SQL injection in the ebaptism.php file. The attack may be performed from remote. The vulnerability requires verification of exposure and potential remediation to prevent attacks. Defenders should prioritize verifying exposure of Baptism Information Management System 1.0 to SQL injection attacks and assess the system's network exposure. The system's software version should be reviewed and updated if necessary to prevent exploitation of the vulnerability.

Defensive priority

Defenders should prioritize verifying exposure of Baptism Information Management System 1.0 to SQL injection attacks and assess the system's network exposure.

Recommended defensive actions

  • Verify exposure of Baptism Information Management System 1.0 to SQL injection attacks
  • Assess the system's network exposure
  • Review and update the system's software version if necessary
  • Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
  • Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
  • Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
  • Check relevant monitoring, detection, and logs for exposed assets that need extra review

Evidence notes

The CVE record and source item provide details on the SQL injection vulnerability in itsourcecode Baptism Information Management System 1.0. However, the corpus does not establish versions beyond 1.0, exploitation, impact, or remediation, which require verification from the supplied official sources.

Sources and references

Verified primary and authoritative sources

  • CVE-2026-108926 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2026-108926

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2026-108926 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2026-108926

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Supplemental references

  • itsourcecode Baptism Information Management System ebaptism.php sql injection

    Unverified legacy reference

    URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108926.json

    cve_program_cvelist_v5

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/vuln/416749

    Supplemental source - vdb-entry, technical-description

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/vuln/416749/cti

    Supplemental source - signature, permissions-required

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/cve/CVE-2026-108926

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://vuldb.com/submit/997397

    Supplemental source - third-party-advisory

  • Source reference

    Unverified legacy reference

    URL: https://github.com/yulisec/submit/issues/1

    Supplemental source - exploit, issue-tracking

  • Source reference

    Unverified legacy reference

    URL: https://itsourcecode.com/

    Supplemental source - product

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.