CVE-2026-36922 identifies a SQL injection vulnerability in Sourcecodester Cab Management System v1.0 specifically within the /cms/admin/categories/view_category.php file. The vulnerability allows injection of malicious SQL code due to insufficient input sanitization or parameterization in that script. No CVSS score or detailed technical exploit information is provided. No vendor advisory or patch information is available, and the affected versions are not explicitly specified beyond version 1.0.

Successful exploitation of this SQL injection vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database. This may lead to unauthorized data disclosure, data modification, or other impacts depending on the database privileges of the application. However, no known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider applying input validation or web application firewall rules to mitigate SQL injection risks in the affected file. Avoid exposing the vulnerable functionality to untrusted users where possible.