Vulnerability · Published Sep 7, 2026 · Assigned by VulDB
CVE-2026-86279SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation
Medium 6.3
In plain English
A medium-severity session fixation in Syllabus-Aligned Learning Management & Examination System from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 34% of all known vulnerabilities).
Official description
A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file auth_process.php of the component Login. This manipulation causes session fixiation. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Syllabus-Aligned Learning Management & Examination System | 1.0 |
Weakness: CWE-384 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-399440 | SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation vdb-entry
- VDB-399440 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- CVE-2026-86279 | CVE Analysis and Report third-party-advisory
- Submit #904880 | SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 Session Fixation third-party-advisory
- https://github.com/hackliu/Vulnerability-Reports/blob/master/Syllabus%20Aligned%20Learning%20Management%20Examination%20System/VULN-06-Session-Management-Flaws.md exploit
- https://www.sourcecodester.com/ product