Privilege Management Flaw in SourceCodester Learning Management System
CVE-2026-86275

6.9MEDIUM

Key Information:

Vendor: Sourcecodester
Status: Syllabus-aligned Learning Management & Examination System
Vendor: CVE Published:; 7 September 2026

🔔 Create Sourcecodester Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-86275?

A vulnerability in the SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 affects the register function within auth.php. This flaw enables attackers to manipulate the role argument, resulting in improper privilege assignment. The vulnerability allows for potential remote exploitation, as the exploit is publicly available. It underscores the importance of rigorous access controls and secure coding practices to mitigate security risks associated with privilege escalation.

Affected Version(s)

Syllabus-Aligned Learning Management & Examination System 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-86275 - Proof of Concept