High severity · published Oct 21, 2026
CVE-2026-114245
dhikshitha29 Insurance-Management-System Add New Admin Form Admin-Register-inc.php improper authorization
7.3
CVSS
0.4%
EPSS
No
On KEV
Description
A weakness has been identified in dhikshitha29 Insurance-Management-System 91de5edda5baa109ad8e9baf03ce6a3ceda84183/125362cc21dca20d74091a4913a5096bb58dd837. Affected by this issue is some unknown functionality of the file /Admin/includes/Admin-Register-inc.php of the component Add New Admin Form. Executing a manipulation of the argument submit/Admin_id/password can lead to improper authorization. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 31% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IN
Insurance-Management-System · dhikshitha29
91de5edda5baa109ad8e9baf03ce6a3ceda84183; 125362cc21dca20d74091a4913a5096bb58dd837 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-114245
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-114245
github.com
https://github.com/dhikshitha29/Insurance-Management-System/
github.com
https://github.com/dhikshitha29/Insurance-Management-System/issues/4
vuldb.com
https://vuldb.com/cve/CVE-2026-114245
vuldb.com
https://vuldb.com/submit/1018588
vuldb.com
https://vuldb.com/vuln/424679
vuldb.com
https://vuldb.com/vuln/424679/cti
More from Insurance-Management-System
7.3
CVE-2026-114249
dhikshitha29 Insurance-Management-System Policy Holder Update Form UpdatePolicyHolder-inc.php improper authorization
7.3
CVE-2026-114243
dhikshitha29 Insurance-Management-System EditPolicyHolder.php mysqli_query sql injection
7.3
CVE-2026-114242
dhikshitha29 Insurance-Management-System editPlan.php mysqli_query sql injection
5.3
CVE-2026-114248
dhikshitha29 Insurance-Management-System Plan Management Form AddNewPlan-inc.php missing authentication
