{"id":"CVE-2026-86279","title":"A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0","summary":"A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file auth_process.php of the component Login. This manipulation causes ses…","severity":"medium","cvss":6.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:L","cwe":["CWE-384"],"vendor":"SourceCodester","product":"Syllabus-Aligned Learning Management & Examination System","affected":["syllabus-aligned_learning_management_examination_system 1.0"],"published":"2026-09-07","updated":"2026-09-09","sourceUpdated":"2026-09-09T15:17:16.050","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86279","references":[{"url":"https://github.com/hackliu/Vulnerability-Reports/blob/master/Syllabus%20Aligned%20Learning%20Management%20Examination%20System/VULN-06-Session-Management-Flaws.md","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-86279","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/904880","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399440","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399440/cti","label":"cna@vuldb.com"},{"url":"https://www.sourcecodester.com/","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-09T14:17:00.822656Z"},"epss":0.00227,"epssPercentile":0.13686,"ingestedAt":"2026-09-08T15:33:26.975Z","slug":"CVE-2026-86279","body":"## Overview\n\nA vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. The impacted element is an unknown function of the file auth_process.php of the component Login. This manipulation causes session fixiation. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":34.7,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":202111,"id":"CVE-2026-86279","ts":1789400062846,"field":"exploit_available","old":"false","new":"true"},{"seq":200838,"id":"CVE-2026-86279","ts":1789397616823,"field":"exploit_available","old":"true","new":"false"},{"seq":199531,"id":"CVE-2026-86279","ts":1789395529375,"field":"exploit_available","old":"false","new":"true"},{"seq":198776,"id":"CVE-2026-86279","ts":1789392244586,"field":"exploit_available","old":"true","new":"false"},{"seq":197109,"id":"CVE-2026-86279","ts":1789384292794,"field":"exploit_available","old":"false","new":"true"},{"seq":194238,"id":"CVE-2026-86279","ts":1789378783468,"field":"exploit_available","old":"true","new":"false"},{"seq":193025,"id":"CVE-2026-86279","ts":1789376515507,"field":"exploit_available","old":"false","new":"true"},{"seq":191812,"id":"CVE-2026-86279","ts":1789373631503,"field":"exploit_available","old":"true","new":"false"},{"seq":190597,"id":"CVE-2026-86279","ts":1789369476268,"field":"exploit_available","old":"false","new":"true"},{"seq":189384,"id":"CVE-2026-86279","ts":1789368422513,"field":"exploit_available","old":"true","new":"false"},{"seq":188167,"id":"CVE-2026-86279","ts":1789365231192,"field":"exploit_available","old":"false","new":"true"},{"seq":186954,"id":"CVE-2026-86279","ts":1789363471673,"field":"exploit_available","old":"true","new":"false"},{"seq":185740,"id":"CVE-2026-86279","ts":1789361229551,"field":"exploit_available","old":"false","new":"true"},{"seq":184527,"id":"CVE-2026-86279","ts":1789358364190,"field":"exploit_available","old":"true","new":"false"},{"seq":182778,"id":"CVE-2026-86279","ts":1789354317619,"field":"exploit_available","old":"false","new":"true"},{"seq":181571,"id":"CVE-2026-86279","ts":1789353318123,"field":"exploit_available","old":"true","new":"false"},{"seq":180364,"id":"CVE-2026-86279","ts":1789350285164,"field":"exploit_available","old":"false","new":"true"},{"seq":179157,"id":"CVE-2026-86279","ts":1789348293339,"field":"exploit_available","old":"true","new":"false"},{"seq":177950,"id":"CVE-2026-86279","ts":1789346370447,"field":"exploit_available","old":"false","new":"true"},{"seq":176743,"id":"CVE-2026-86279","ts":1789343184913,"field":"exploit_available","old":"true","new":"false"},{"seq":174860,"id":"CVE-2026-86279","ts":1789334876114,"field":"exploit_available","old":"false","new":"true"},{"seq":173655,"id":"CVE-2026-86279","ts":1789333697404,"field":"exploit_available","old":"true","new":"false"},{"seq":172469,"id":"CVE-2026-86279","ts":1789331093483,"field":"exploit_available","old":"false","new":"true"},{"seq":171283,"id":"CVE-2026-86279","ts":1789328781282,"field":"exploit_available","old":"true","new":"false"},{"seq":170078,"id":"CVE-2026-86279","ts":1789327197587,"field":"exploit_available","old":"false","new":"true"},{"seq":168873,"id":"CVE-2026-86279","ts":1789323840541,"field":"exploit_available","old":"true","new":"false"},{"seq":167668,"id":"CVE-2026-86279","ts":1789319703069,"field":"exploit_available","old":"false","new":"true"},{"seq":166463,"id":"CVE-2026-86279","ts":1789318776545,"field":"exploit_available","old":"true","new":"false"},{"seq":165258,"id":"CVE-2026-86279","ts":1789315791179,"field":"exploit_available","old":"false","new":"true"},{"seq":164053,"id":"CVE-2026-86279","ts":1789313634670,"field":"exploit_available","old":"true","new":"false"},{"seq":162848,"id":"CVE-2026-86279","ts":1789311903887,"field":"exploit_available","old":"false","new":"true"},{"seq":161643,"id":"CVE-2026-86279","ts":1789308733599,"field":"exploit_available","old":"true","new":"false"},{"seq":159756,"id":"CVE-2026-86279","ts":1789300470962,"field":"exploit_available","old":"false","new":"true"},{"seq":156745,"id":"CVE-2026-86279","ts":1789294756099,"field":"exploit_available","old":"true","new":"false"},{"seq":155540,"id":"CVE-2026-86279","ts":1789292968361,"field":"exploit_available","old":"false","new":"true"},{"seq":154335,"id":"CVE-2026-86279","ts":1789289797988,"field":"exploit_available","old":"true","new":"false"},{"seq":151586,"id":"CVE-2026-86279","ts":1789277630270,"field":"exploit_available","old":"false","new":"true"},{"seq":150547,"id":"CVE-2026-86279","ts":1789276246311,"field":"exploit_available","old":"true","new":"false"},{"seq":149514,"id":"CVE-2026-86279","ts":1789273825134,"field":"exploit_available","old":"false","new":"true"},{"seq":148481,"id":"CVE-2026-86279","ts":1789271349140,"field":"exploit_available","old":"true","new":"false"},{"seq":146512,"id":"CVE-2026-86279","ts":1789269398453,"field":"exploit_available","old":"false","new":"true"},{"seq":145317,"id":"CVE-2026-86279","ts":1789266340654,"field":"exploit_available","old":"true","new":"false"},{"seq":144221,"id":"CVE-2026-86279","ts":1789262617149,"field":"exploit_available","old":"false","new":"true"},{"seq":143125,"id":"CVE-2026-86279","ts":1789261533841,"field":"exploit_available","old":"true","new":"false"},{"seq":141956,"id":"CVE-2026-86279","ts":1789258832271,"field":"exploit_available","old":"false","new":"true"},{"seq":140797,"id":"CVE-2026-86279","ts":1789256727538,"field":"exploit_available","old":"true","new":"false"},{"seq":139599,"id":"CVE-2026-86279","ts":1789254832482,"field":"exploit_available","old":"false","new":"true"},{"seq":138401,"id":"CVE-2026-86279","ts":1789251934615,"field":"exploit_available","old":"true","new":"false"},{"seq":137203,"id":"CVE-2026-86279","ts":1789247833206,"field":"exploit_available","old":"false","new":"true"},{"seq":136005,"id":"CVE-2026-86279","ts":1789247056462,"field":"exploit_available","old":"true","new":"false"}]}