CVE-2026-105146

Published 4 October 2026 · tracked since 4 October 2026

Description

A vulnerability was found in Comsenz Discuz! X5.0-20260801/X5.0-20260820/X5.0-20260910. Affected by this issue is the function modmedalsubmit of the file upload/source/app/admin/child/medals/mod.php of the component Admin Medal Moderation. The manipulation of the argument delete results in sql injec

References

• NVD — National Vulnerability Database
• CVE.org record (MITRE)
• CISA Known Exploited Vulnerabilities catalog

Latest tracked vulnerabilities

• CVE-2026-105144 MEDIUM 5.3
• CVE-2026-105137 MEDIUM 5
• CVE-2026-86817
• CVE-2026-93549
• CVE-2026-97332
• CVE-2026-17005
• CVE-2026-104119
• CVE-2026-104118
• CVE-2026-105123 HIGH 8.8
• CVE-2026-105124 MEDIUM 6.1

→ Open the live CVE board · all tools