CVE-2026-11495 is a SQL injection vulnerability affecting CodeAstro Ingredients Stock Management System version 1.0. The vulnerability exists due to improper sanitization of the ID parameter in the /Ingredients-Stock/add_stock.php script, enabling remote attackers to manipulate SQL queries. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity. There is no vendor advisory or patch available at this time, and the remediation level is unknown. Although the exploit is publicly available, there are no confirmed reports of exploitation in the wild.

Successful exploitation of this vulnerability could allow an attacker with low privileges to execute arbitrary SQL commands on the backend database remotely. This may lead to unauthorized data access or modification. However, the impact is rated medium due to limited privileges required and the absence of confirmed active exploitation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider implementing input validation or web application firewall rules to block malicious SQL injection attempts targeting the ID parameter in /Ingredients-Stock/add_stock.php.