CVE-2026-6489 — QueryMine Sms Unrestricted File Upload
Image via images.unsplash.com
CVE-2026-6489 — A security flaw has been discovered in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593. This issue affects some unknown processing of the file admin/addteacher.php of the component Background Management Page. The manipulation of the argument image results in unrestricted
What This Means For You
- If your environment is affected by CWE-284, CWE-434, review your exposure and prioritize patching based on your environment. Monitor vendor advisories for CVE-2026-6489 updates and patches.
Related ATT&CK Techniques
🛡️ Detection Rules
6 rules · 6 SIEM formats6 detection rules auto-generated for this incident, mapped to MITRE ATT&CK. Sigma YAML is free — export to any SIEM format via the Intel Bot.
Web Application Exploitation Attempt — CVE-2026-6489
Indicators of Compromise
| ID | Type | Indicator |
|---|---|---|
| CVE-2026-6489 | vulnerability | CVE-2026-6489 |
| CWE-284 | weakness | CWE-284 |
| CWE-434 | weakness | CWE-434 |
Written by SCW Vulnerability Desk
Source & Attribution
| Source Platform | NVD |
| Channel | National Vulnerability Database |
| Published | April 17, 2026 at 16:16 UTC |
This content was curated and summarized by Shimi's Cyber World for informational purposes. It is not copied or republished in full. All intellectual property rights remain with the original author and source.
Believe this infringes your rights? Submit a takedown request.
Related Posts
CVE-2026-6492 — Arnobt78 Hotel Booking Management System Information Disclosure
CVE-2026-6492 — A vulnerability was detected in arnobt78 Hotel Booking Management System up to f8922d0e0f6ac1cc761974c7616f44c2bbc04bea. The impacted element is an unknown function of the file...
CVE-2026-6491 — Libvips Buffer Overflow
CVE-2026-6491 — A security vulnerability has been detected in libvips up to 8.18.2. The affected element is the function im_minpos_vec of the file libvips/deprecated/vips7compat.c of...
SQL Injection Flaw in QueryMine SMS: Remote Exploitation Possible
CVE-2026-6490 — A weakness has been identified in QueryMine sms up to 7ab5a9ea196209611134525ffc18de25c57d9593. Impacted is an unknown function of the file admin/deletecourse.php of the component...