The vulnerability CVE-2026-7555 affects itsourcecode Electronic Judging System 1.0 and involves SQL injection via the Username parameter in the /intrams/login.php file. This allows an unauthenticated remote attacker to inject SQL commands, potentially compromising the backend database. The vulnerability has a CVSS 4.0 score of 6.9 (medium severity) with network attack vector, low complexity, no privileges required, and no user interaction needed. No vendor patch or official remediation is currently documented.

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL commands on the backend database, potentially leading to unauthorized data access or modification. The publicly available exploit increases the risk of exploitation. However, the impact is rated medium severity, reflecting some limitations such as low confidentiality, integrity, and availability impact metrics.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, consider implementing web application firewall (WAF) rules to detect and block SQL injection attempts targeting the Username parameter. Review and apply secure coding practices to sanitize and validate all user inputs in the affected application component.