PatchSiren cyber security CVE debrief
CVE-2026-108926 itsourcecode CVE debrief
A security flaw has been discovered in itsourcecode Baptism Information Management System 1.0, specifically in the ebaptism.php file, which is vulnerable to SQL injection. The attack may be performed from remote. The exploit has been released to the public and may be used for attacks. Defenders should assess exposure and prioritize verification and potential remediation. The vulnerability requires verification of exposure and potential remediation to prevent attacks. The system's network exposure should be assessed and software version reviewed if necessary.
- Vendor
- itsourcecode
- Product
- Baptism Information Management System
- CVSS
- MEDIUM 5.3
- CISA KEV
- Not listed in stored evidence
- Original CVE published
- 2026-10-12
- Original CVE updated
- 2026-10-12
- Advisory published
- 2026-10-12
- Advisory updated
- 2026-10-12
Who should care
Defenders responsible for the Baptism Information Management System 1.0 should assess exposure to SQL injection attacks and prioritize verification and potential remediation. Operators, administrators, and security teams should review the system's vulnerability and take necessary actions to prevent exploitation. The system's network exposure should be assessed and software version reviewed if necessary to prevent attacks.
Why it matters
The SQL injection vulnerability in itsourcecode Baptism Information Management System 1.0 requires verification of exposure and potential remediation to prevent attacks.
- Verify exposure of Baptism Information Management System 1.0 to SQL injection attacks
- Assess the system's network exposure
- Review and update the system's software version if necessary
Technical summary
The itsourcecode Baptism Information Management System 1.0 is vulnerable to SQL injection in the ebaptism.php file. The attack may be performed from remote. The vulnerability requires verification of exposure and potential remediation to prevent attacks. Defenders should prioritize verifying exposure of Baptism Information Management System 1.0 to SQL injection attacks and assess the system's network exposure. The system's software version should be reviewed and updated if necessary to prevent exploitation of the vulnerability.
Defensive priority
Defenders should prioritize verifying exposure of Baptism Information Management System 1.0 to SQL injection attacks and assess the system's network exposure.
Recommended defensive actions
- Verify exposure of Baptism Information Management System 1.0 to SQL injection attacks
- Assess the system's network exposure
- Review and update the system's software version if necessary
- Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up
- Review the supplied official advisory or CVE record to validate affected scope, severity, and vendor guidance
- Plan vendor-supported updates or mitigations through normal change control where exposure is confirmed
- Check relevant monitoring, detection, and logs for exposed assets that need extra review
Evidence notes
The CVE record and source item provide details on the SQL injection vulnerability in itsourcecode Baptism Information Management System 1.0. However, the corpus does not establish versions beyond 1.0, exploitation, impact, or remediation, which require verification from the supplied official sources.
Sources and references
Verified primary and authoritative sources
-
CVE-2026-108926 CVE Program record
Publisher, destination, and source semantics verified
URL: https://www.cve.org/CVERecord?id=CVE-2026-108926
CVE Program - Official CVE Program record with source-provided CVE metadata.
-
CVE-2026-108926 NVD vulnerability detail
Publisher, destination, and source semantics verified
URL: https://nvd.nist.gov/vuln/detail/CVE-2026-108926
NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.
Supplemental references
-
itsourcecode Baptism Information Management System ebaptism.php sql injection
Unverified legacy reference
URL: https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/108xxx/CVE-2026-108926.json
cve_program_cvelist_v5
-
Source reference
Unverified legacy reference
URL: https://vuldb.com/vuln/416749
Supplemental source - vdb-entry, technical-description
-
Source reference
Unverified legacy reference
URL: https://vuldb.com/vuln/416749/cti
Supplemental source - signature, permissions-required
-
Source reference
Unverified legacy reference
URL: https://vuldb.com/cve/CVE-2026-108926
Supplemental source - third-party-advisory
-
Source reference
Unverified legacy reference
URL: https://vuldb.com/submit/997397
Supplemental source - third-party-advisory
-
Source reference
Unverified legacy reference
URL: https://github.com/yulisec/submit/issues/1
Supplemental source - exploit, issue-tracking
-
Source reference
Unverified legacy reference
URL: https://itsourcecode.com/
Supplemental source - product
Methodology and review provenance
AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.