Login Request a demo
Medium severity · published Sep 7, 2026
CVE-2026-86279
SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation
6.3
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file auth_process.php of the component Login. This manipulation causes session fixiation. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
Required
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 34% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SL
Syllabus-Aligned Learning Management & Examination System · SourceCodester
1.0 · source: vendor
Affected product
SL
Syllabus-Aligned Learning Management & Examination System
SourceCodester
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-86279
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-86279
github.com
https://github.com/hackliu/Vulnerability-Reports/blob/master/Syllabus%20Aligned%20Learning%20Management%20Examination%20System/VULN-06-Session-Management-Flaws.md
vuldb.com
https://vuldb.com/cve/CVE-2026-86279
vuldb.com
https://vuldb.com/submit/904880
vuldb.com
https://vuldb.com/vuln/399440
vuldb.com
https://vuldb.com/vuln/399440/cti
www.sourcecodester.com
https://www.sourcecodester.com/
More from Syllabus-Aligned Learning Management & Examination System
7.3
CVE-2026-86277
SourceCodester Syllabus-Aligned Learning Management & Examination System delete_exam.php authorization
7.3
CVE-2026-86276
SourceCodester Syllabus-Aligned Learning Management & Examination System db.php hard-coded credentials
5.3
CVE-2026-86280
SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage
5.3
CVE-2026-86275
SourceCodester Syllabus-Aligned Learning Management & Examination System auth.php register privileges management
4.3
CVE-2026-86281
SourceCodester Syllabus-Aligned Learning Management & Examination System cross-site request forgery