Reference page — cumulative record through Wednesday, August 19, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.
AV AC AT PR UI VC VI VA CVSS EPSS %ile KEV N L N N N L L L 5.5 .0031 24.1 —
AFFECTED Product Versions Fixed house dea6bcceaebe2b364a5a209747f48ecc2b2dc670 – —
TIMELINE Aug 6 Reserved by VulDB Aug 6 Published (CNA: VulDB) Aug 7 EXPLOIT PUBLISHED — CVE-2026-19062 (chiuwingyan house). Public exploit reference added.
A vulnerability has been found in chiuwingyan house up to dea6bcceaebe2b364a5a209747f48ecc2b2dc670. This affects an unknown part of the file /paid/selectall.action. The manipulation of the argument zuname leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The vendor was contacted early about this disclosure but did not respond in any way.
| Date | Event | Detail |
|---|---|---|
| August 6, 2026 | Reserved | Reserved by VulDB |
| August 6, 2026 | Published | Published (CNA: VulDB) |
| August 7, 2026 | EXPLOIT PUBLISHED | EXPLOIT PUBLISHED — CVE-2026-19062 (chiuwingyan house). Public exploit reference added. |
| Vendor | Product / Package | Ecosystem | Version introduced | Fixed |
|---|---|---|---|---|
| chiuwingyan | house | — | dea6bcceaebe2b364a5a209747f48ecc2b2dc670 | — |
Authoritative record: CVE-2026-19062 at cve.org
Vendors: chiuwingyan
This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-19062 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, August 19, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.