High severity · published Sep 7, 2026
CVE-2026-86277
SourceCodester Syllabus-Aligned Learning Management & Examination System delete_exam.php authorization
7.3
CVSS
0.5%
EPSS
No
On KEV
Description
A vulnerability has been found in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. Impacted is an unknown function of the file delete_exam.php. The manipulation of the argument ID leads to authorization bypass. The attack is possible to be carried out remotely. The exploit has been disclosed to the public and may be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 44% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SL
Syllabus-Aligned Learning Management & Examination System · SourceCodester
1.0 · source: vendor
Affected product
SL
Syllabus-Aligned Learning Management & Examination System
SourceCodester
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-86277
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-86277
github.com
https://github.com/hackliu/Vulnerability-Reports/blob/master/Syllabus%20Aligned%20Learning%20Management%20Examination%20System/VULN-04-IDOR-Broken-Access-Control.md
vuldb.com
https://vuldb.com/cve/CVE-2026-86277
vuldb.com
https://vuldb.com/submit/904877
vuldb.com
https://vuldb.com/vuln/399438
vuldb.com
https://vuldb.com/vuln/399438/cti
www.sourcecodester.com
https://www.sourcecodester.com/
More from Syllabus-Aligned Learning Management & Examination System
7.3
CVE-2026-86276
SourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded credentials
6.3
CVE-2026-86279
SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation
5.3
CVE-2026-86280
SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage
5.3
CVE-2026-86275
SourceCodester Syllabus-Aligned Learning Management & Examination System auth.php register privileges management
4.3
CVE-2026-86281
SourceCodester Syllabus-Aligned Learning Management & Examination System cross-site request forgery