CVE-2026-85517
Received Received - Intake

SQL Database Backup File Handler Information Disclosure in Vehicle Management System 1.0

Publication date: 2026-09-04

Last updated on: 2026-09-04

Assigner: VulDB

Description
A flaw has been found in code-projects Vehicle Management System 1.0. The impacted element is an unknown function of the file /vehicle_management.sql of the component SQL Database Backup File Handler. Executing a manipulation can lead to information disclosure. It is possible to launch the attack remotely. The exploit has been published and may be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-04
Last Modified
2026-09-04
Generated
2026-09-04
AI Q&A
2026-09-04
EPSS Evaluated
N/A
NVD
CVE-2026-85517
EUVD
EUVD-2026-71099

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
code-projects vehicle_management_system 1.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-200 The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
CWE-284 The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

CVE-2026-85517 is a vulnerability in the Vehicle Management System 1.0 where an exposed SQL database backup file (vehicle_management.sql) allows remote attackers to access sensitive information without authentication. The flaw stems from the file being stored in a publicly accessible web directory, enabling unauthorized data disclosure.

Detection Guidance

Check if the vehicle_management.sql file is accessible via HTTP by attempting to access it directly in a web browser or using curl commands like 'curl http://localhost/Vehicle-Management/vehicle_management.sql'. If the file is exposed, it will reveal sensitive database information.

Impact Analysis

This vulnerability could allow attackers to retrieve sensitive data such as database structures, user credentials, vehicle records, and other confidential information. If exploited, it may lead to privacy breaches, unauthorized access to systems, or further attacks leveraging exposed data.

Compliance Impact

This vulnerability likely violates compliance requirements under GDPR and HIPAA due to unauthorized exposure of personal and sensitive data. GDPR mandates protection of personal data, while HIPAA requires safeguarding protected health information. Exploitation could result in legal penalties and reputational damage.

Mitigation Strategies

Remove the vehicle_management.sql file from the public web directory. Ensure deployment packages exclude SQL backup files. Restrict access to sensitive file extensions and verify the web root does not expose unnecessary files.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-85517. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart