CVE-2026-86519: Information Disclosure in code-projects Student Crud Operation

This vulnerability in code-projects Student Crud Operation 1.0 involves an information disclosure flaw in the /card_activation.sql file related to the Backup File Handler component. The flaw allows remote attackers to obtain sensitive information without requiring privileges or user interaction. The CVSS 4.0 base score is 6.9, indicating a medium severity level. Exploit code has been publicly disclosed, but there is no indication of active exploitation in the wild. No patch or remediation details are provided.

Successful exploitation results in unauthorized information disclosure. The vulnerability can be triggered remotely without authentication or user interaction, potentially exposing sensitive data handled by the Backup File Handler component. There is no evidence of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor vendor communications for updates. Until a patch is available, consider restricting remote access to the affected component and reviewing backup file handling procedures to minimize exposure.