Vulnerability · Published Jun 17, 2026 · Assigned by VulDB
CVE-2026-12529SourceCodester CET Automated Grading System with AI Predictive Analytics Student Self-Registration Endpoint index.php access control
High 7.3
In plain English
A high-severity improper access control in CET Automated Grading System with AI Predictive Analytics from SourceCodester. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).
Official description
A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. Affected is an unknown function of the file /index.php of the component Student Self-Registration Endpoint. The manipulation leads to improper access controls. Remote exploitation of the attack is possible.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | CET Automated Grading System with AI Predictive Analytics | 1.0 |
Weakness: CWE-284, CWE-266 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R
References
- VDB-371976 | SourceCodester CET Automated Grading System with AI Predictive Analytics Student Self-Registration Endpoint index.php access control vdb-entry
- VDB-371976 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-12529 | CVE Analysis and Report third-party-advisory
- Submit #837783 | https://www.sourcecodester.com/ CET Automated Grading System with AI Predictive Analytics in PHP and MySQL Version: 1.0 Improper Access Controls third-party-advisory
- https://www.sourcecodester.com/ product