CVE-2026-90856

medium

Description

A security vulnerability has been detected in SourceCodester College Notes Gallery Management System 1.0. This impacts an unknown function of the file signup.php of the component Registration Flow. Such manipulation of the argument role leads to improper privilege management. The attack can be launched remotely. The exploit has been disclosed publicly and may be used.

References

https://www.sourcecodester.com/

https://vuldb.com/vuln/403413/cti

https://vuldb.com/vuln/403413

https://vuldb.com/submit/927252

https://vuldb.com/cve/CVE-2026-90856

https://github.com/Andyov0/cve/issues/4

Details

Source: Mitre, NVD

Published: 2026-09-15

Updated: 2026-09-15

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 7.3

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Severity: High

CVSS v4

Base Score: 6.9

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Severity: Medium

EPSS

EPSS: 0.00288