Jon Remus Sevellejo

CVE-2026-26700 Mar 02, 17:16 CRITICAL POC Act Now

Personnel Property Equipment System has a fourth SQL injection.

CVE-2026-26701 Mar 02, 16:16 CRITICAL POC Act Now

Personnel Property Equipment System v1.0 has a third SQL injection.

CVE-2026-26699 Mar 02, 16:16 HIGH POC This Week

Arbitrary code execution in Personnel Property Equipment System v1.0 allows authenticated attackers with high privileges to execute malicious code through the admin picture upload functionality. Public exploit code exists for this vulnerability, and no patch is currently available. Attackers can achieve complete compromise of confidentiality, integrity, and availability on affected systems.

CVE-2026-26703 Mar 02, 15:16 CRITICAL POC Act Now

Personnel Property Equipment System v1.0 has a second SQL injection in a different admin endpoint.

CVE-2026-26702 Mar 02, 15:16 CRITICAL POC Act Now

Personnel Property Equipment System v1.0 has SQL injection in admin panel.