CVE-2026-122048 is a SQL injection vulnerability in the Campcodes Division Regional Athletic Meet Game Result Matrix System up to version 2.1. The flaw exists in the /dipam/check-user.php file where manipulation of the 'abbr' argument allows remote attackers to execute SQL injection attacks. Public exploit code is available for this vulnerability.