High severity · published May 26, 2026
CVE-2026-9517
hemant6488 CodeIgniter-StudentManagementSystem Student Management addStudentView access control
7.3
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability was determined in hemant6488 CodeIgniter-StudentManagementSystem. The affected element is an unknown function of the file /index.php/students/addStudentView of the component Student Management Handler. Executing a manipulation can lead to improper access controls. The attack can be executed remotely. The exploit has been publicly disclosed and may be utilized. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. The project was informed of the problem early through an issue report but has not responded yet.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
CodeIgniter-StudentManagementSystem · hemant6488
9abd69448c66555d434755e6bd0b099a8527a0a9; 9157e0c28b177fdbe69cf76e878eca365fedbf5f; f2e07d2ecd007fa1429f0444510ad95a8d0d7c73 · source: vendor
Affected product
CO
CodeIgniter-StudentManagementSystem
hemant6488
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-9517
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-9517
github.com
https://github.com/hemant6488/CodeIgniter-StudentManagementSystem/
github.com
https://github.com/hemant6488/CodeIgniter-StudentManagementSystem/issues/5
vuldb.com
https://vuldb.com/submit/814277
vuldb.com
https://vuldb.com/vuln/365537
vuldb.com
https://vuldb.com/vuln/365537/cti
More from CodeIgniter-StudentManagementSystem
4.3
CVE-2026-9518
hemant6488 CodeIgniter-StudentManagementSystem Students Controller view_students.php addStudent cross site scripting
