CVE-2026-14608CWE-285CWE-639

SourceCodester CET Automated Grading System with AI Predictive Analytics POST index.php view_student authorization

Medium · published July 3, 2026

CVSS v4.0
5.3
EPSS
0%
Percentile
30.2
In the wild
Unconfirmed
What it is

A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=view_student of the component POST Handler. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

The record
Technical detail
CVSS v4.0
5.3 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
EPSS
0.00374 · 30.2th percentile
Weaknesses
CWE-285 · Improper Authorization; CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2026-07-03T20:00Z
EPSS history
Timeline
  • 03 JUL 20:00Z
    SourceCodester CET Automated Grading System with AI Predictive Analytics POST index.php view_student authorization
    cvelistv5