CVE-2026-7632 is a SQL injection vulnerability in code-projects Online Hospital Management System 1.0, specifically in the /viewappointment.php file via the delid parameter. The vulnerability allows remote attackers to manipulate SQL queries, potentially leading to data disclosure, modification, or denial of service. Public exploit code has been disclosed. No patch or remediation information is currently available.