SourceCodester Teacher Record System 1.0 contains a SQL injection vulnerability in the component handling the 'searchteacher' argument. This allows an unauthenticated remote attacker to inject malicious SQL commands by manipulating this parameter, potentially compromising the database integrity or confidentiality. The vulnerability is identified as CVE-2026-5182 with a CVSS 4.0 score of 6.9, reflecting network attack vector, low attack complexity, no privileges or user interaction required, and low to limited impact on confidentiality, integrity, and availability. Public exploit code exists, increasing the risk of exploitation.

Successful exploitation could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access, modification, or deletion. The impact is rated medium severity with limited but non-negligible effects on confidentiality, integrity, and availability. No evidence of active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider implementing input validation and parameterized queries as temporary mitigations to reduce SQL injection risk. Monitoring for unusual database activity may also help detect exploitation attempts.