Cleartext Information Exposure in SourceCodester Learning Management System
CVE-2026-86280

6.9MEDIUM

Key Information:

Vendor: Sourcecodester
Status: Syllabus-aligned Learning Management & Examination System
Vendor: CVE Published:; 7 September 2026

🔔 Create Sourcecodester Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-86280?

A vulnerability identified in the Syllabus-Aligned Learning Management & Examination System 1.0 allows unauthorized manipulation of the file cict_portal.sql. This exploitation results in the cleartext storage of sensitive information, which poses significant risks to data integrity and confidentiality. The vulnerability can be targeted remotely, and the exploit is publicly accessible, potentially exposing user data to malicious actors.

Affected Version(s)

Syllabus-Aligned Learning Management & Examination System 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-86280 - Proof of Concept