Cross-Site Request Forgery Vulnerability in SourceCodester Learning Management System
CVE-2026-86281

5.3MEDIUM

Key Information:

Vendor: Sourcecodester
Status: Syllabus-aligned Learning Management & Examination System
Vendor: CVE Published:; 7 September 2026

🔔 Create Sourcecodester Vulnerability Alert

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-86281?

A security flaw exists in the SourceCodester Syllabus-Aligned Learning Management & Examination System version 1.0, allowing for cross-site request forgery (CSRF) attacks. This vulnerability impacts an unspecified function, enabling unauthorized actions on behalf of authenticated users. The exploit can be initiated remotely, posing a significant risk to systems that utilize this software. An exploit has already been made public, heightening the urgency for affected users to take immediate action to mitigate potential attacks.

Affected Version(s)

Syllabus-Aligned Learning Management & Examination System 1.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-86281 - Proof of Concept