Vulnerability · Published Feb 8, 2026 · Assigned by VulDB

CVE-2026-2183Great Developers Certificate Generation System csv.php unrestricted upload

Medium 6.3

In plain English

A medium-severity unrestricted file upload in Certificate Generation System from Great Developers. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 16% of all known vulnerabilities).

Severity (CVSS 3.1)6.3Medium

Exploit odds (30 days)0.2%top 83.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A security vulnerability has been detected in Great Developers Certificate Generation System up to 97171bb0e5e22e52eacf4e4fa81773e5f3cffb73. This affects an unknown part of the file /restructured/csv.php. The manipulation leads to unrestricted upload. Remote exploitation of the attack is possible. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The code repository of the project has not been active for many years.

Affected products (as reported)

Vendor	Product	Versions
Great Developers	Certificate Generation System	97171bb0e5e22e52eacf4e4fa81773e5f3cffb73

Weakness: CWE-434, CWE-284 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:R

References

VDB-344886 | Great Developers Certificate Generation System csv.php unrestricted upload vdb-entry
VDB-344886 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
Submit #749713 | Great Developers Certificate Generator System 1.0 Unrestricted Upload third-party-advisory
https://github.com/lakshayyverma/CVE-Discovery/blob/main/Certificate.md related