CVE-2026-86279CWE-384

CVE-2026-86279

Medium · published September 7, 2026

CVSS v3.1
6.3
EPSS
0%
Percentile
32.7
In the wild
Unconfirmed
What it is

A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file auth_process.php of the component Login. This manipulation causes session fixiation. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.

The record
Technical detail
CVSS v3.1
6.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L
CVSS v4.0
5.3 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
EPSS
0.00396 · 32.7th percentile
Weakness
CWE-384 · Session Fixation
Published
2026-09-07T11:16Z
References (6)
https://github.com/hackliu/Vulnerability-Reports/blob/master/Syllabus%20Aligned%20Learning%20Management%20Examination%20System/VULN-06-Session-Management-Flaws.md · [email protected]https://vuldb.com/cve/CVE-2026-86279 · [email protected]https://vuldb.com/submit/904880 · [email protected]https://vuldb.com/vuln/399440 · [email protected]https://vuldb.com/vuln/399440/cti · [email protected]https://www.sourcecodester.com/ · [email protected]
EPSS history
Timeline
  • 08 SEP 03:24Z
    EPSS moved — → 0%
    epss
  • 07 SEP 07:00Z
    SourceCodester Syllabus-Aligned Learning Management & Examination System Login auth_process.php session fixiation
    cvelistv5