Threats affecting pkg:github/menevarad007/CVE-2026-37749

CVE-2026-37749 is a critical SQL injection vulnerability in CodeAstro Simple Attendance Management System v1.0. It allows remote unauthenticated attackers to bypass authentication by exploiting the username parameter in index.php. The vulnerability has a high CVSS score of 9.8, indicating severe impact on confidentiality, integrity, and availability. No patch or official remediation guidance is currently available. There are no known exploits in the wild at this time.