Vulnerability · Published Sep 15, 2026 · Assigned by VulDB
CVE-2026-90856SourceCodester College Notes Gallery Management System Registration Flow signup.php privileges management
High 7.3
In plain English
A high-severity privilege mismanagement in College Notes Gallery Management System from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 43% of all known vulnerabilities).
Official description
A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the component Registration Flow. Such manipulation of the argument role leads to improper privilege management. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | College Notes Gallery Management System | 1.0 |
Weakness: CWE-269, CWE-266 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-403413 | SourceCodester College Notes Gallery Management System Registration Flow signup.php privileges management vdb-entry, technical-description
- VDB-403413 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-90856 | CVE Analysis and Report third-party-advisory
- Submit #927252 | SourceCodester College Notes Gallery Management System using PHP with Source Code 1.0 Missing Authorization third-party-advisory
- https://github.com/Andyov0/cve/issues/4 exploit, issue-tracking
- https://www.sourcecodester.com/ product