Is CVE-2026-12775 actively exploited?

No active exploitation of CVE-2026-12775 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2026-12775 be exploited remotely?

Yes. CVE-2026-12775 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2026-12775?

CVE-2026-12775 has a CVSS score of 7.3 (HIGH).

HOME VULNERABILITIESCVE-2026-12775

HIGH

CVE-2026-12775

CWE-74Published: June 21, 2026· Updated: Jun 23, 2026

7.3

CVSS v3.1

EPSS:0.26%probability of exploitation in 30 daysPercentile:17.1th

Official Description

A vulnerability was detected in Montodel House-Rental-Management up to 90010017b81265eb1ef3810268909f7719a33863. Affected by this issue is some unknown functionality of the file /login.php. The manipulation of the argument Username results in sql injection. The attack can be executed remotely. The exploit is now public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The vendor was contacted early about this disclosure but did not respond in any way.

NVD Source

Technical Analysis

CVE-2026-12775 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.