CRITICALVulnerability
Verified
Global

NVD CRITICAL: CVE-2026-19425 — Travel Agency Management System developed by Win Men Intermational has a SQL Inj...

·Source: NIST NVD

Updated:

Executive Summary

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents.

Analysis

Travel Agency Management System developed by Win Men Intermational has a SQL Injection vulnerability. Unauthenticated remote attackers can inject arbitrary SQL commands to read, modify, and delete database contents. CVSS Score: 9.8. Published: 2026-08-11T05:17:14.680.

Indicators of Compromise (1)

CVE (1)
CVE-2026-19425
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Aug 11, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerabilityNEW

Noggin HQ raises £2.3m and secures credit referencing authorisation

British alternative credit scoring technology startup Noggin HQ has raised £2.3 million in an oversubscribed seed round.

Finextra
CRITICALVulnerabilityNEW

NVD CRITICAL: CVE-2026-18963 — A flaw was found in the reset-credentials flow of the keycloak-services componen...

A flaw was found in the reset-credentials flow of the keycloak-services component, which is the core engine for identity and access management in Red Hat Build of Keycloak. The issue allows an unauthenticated attacker to force the password reset process for any user without needing to click the required email verification link. This can result in the attacker gaining full control over target user

CVE-2026-18963
NIST NVD
MEDIUMVulnerability

Berlin cuts two state ministries off government network after security breach

The affected ministries — one responsible for urban development, construction and housing, and the other for mobility, transport, climate protection and the environment — have been isolated from government networks since Friday as a precaution.

The Record