The vulnerability identified as CVE-2026-36945 affects Sourcecodester Computer and Mobile Repair Shop Management System v1.0. It is a SQL injection flaw located in the /rsms/admin/clients/manage_client.php file. The vulnerability could allow attackers to inject malicious SQL commands, which may compromise the confidentiality or integrity of the database. No CVSS score or detailed impact metrics are provided, and no patch or mitigation details are available from the vendor or other sources.

Successful exploitation of this SQL injection vulnerability could enable an attacker to access, modify, or delete sensitive data stored in the application's database. However, there is no evidence of active exploitation in the wild. The lack of a vendor advisory or patch means the risk remains unmitigated unless users apply their own mitigations.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing input validation and parameterized queries as temporary mitigations to reduce the risk of SQL injection. Monitor vendor channels for updates regarding patches or official remediation.