Medium severity · published Oct 4, 2026
CVE-2026-105146
Comsenz Discuz! Admin Medal Moderation mod.php modmedalsubmit sql injection
4.7
CVSS
0.2%
EPSS
No
On KEV
Description
A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql injection. It is possible to launch the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
High
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.2% · higher than 16% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
DI
Discuz! · Comsenz
X5.0-20260801; X5.0-20260820; X5.0-20260910 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-105146
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-105146
vdb-entry
https://vuldb.com/vuln/413371
signature
https://vuldb.com/vuln/413371/cti
third-party-advisory
https://vuldb.com/cve/CVE-2026-105146
third-party-advisory
https://vuldb.com/submit/945923
More from Discuz!
8.8
CVE-2018-14729
The database backup feature in upload/source/admincp/admincp_db.php in Discuz! 2.5 and 3.4 allows remote attackers to execute arbitrary PHP code
–
CVE-2008-3554
SQL injection vulnerability in index.php in Discuz! 6.0.1 allows remote attackers to execute arbitrary SQL commands via the searchid parameter in a search action