CVE-2026-86275
Received Received - Intake

Improper Privilege Management in Syllabus-Aligned Learning Management System

Publication date: 2026-09-07

Last updated on: 2026-09-07

Assigner: VulDB

Description
A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This vulnerability affects the function register of the file auth.php. Performing a manipulation of the argument role results in improper privilege management. Remote exploitation of the attack is possible. The exploit is now public and may be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-07
Last Modified
2026-09-07
Generated
2026-09-07
AI Q&A
2026-09-07
EPSS Evaluated
N/A
NVD
CVE-2026-86275
EUVD
EUVD-2026-72260

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
sourcecodester syllabus_aligned_learning_management_and_examination_system 1.0

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-269 The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
CWE-266 A product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability is an unauthenticated privilege escalation flaw in the Syllabus-Aligned Learning Management & Examination System version 1.0. It allows attackers to bypass client-side restrictions and register with elevated privileges like 'super_admin' by manipulating the role parameter in the auth.php file. The issue stems from improper server-side validation of user input.

Detection Guidance

To detect this vulnerability, monitor HTTP POST requests to auth.php for unauthorized role parameter manipulation. Check if the role parameter accepts values other than 'student' or 'instructor'. Use tools like curl to test the endpoint: curl -X POST -d 'role=super_admin&username=test&password=test' http://target/auth.php. Inspect server logs for unusual role assignments or unauthorized access attempts.

  • Test the registration endpoint with modified role values using curl or Burp Suite to observe if privilege escalation occurs.
Impact Analysis

An attacker could exploit this to gain full administrative access to the system without authentication. This could lead to unauthorized access to sensitive data such as grades, exam results, and personally identifiable information of over 90 users. They could also manipulate data, escalate privileges further, or use the system as a launchpad for additional attacks.

Compliance Impact

This vulnerability could lead to violations of regulations like GDPR or HIPAA by exposing personally identifiable information or protected health data. Unauthorized access to sensitive data may result in legal penalties, fines, or reputational damage due to non-compliance with data protection requirements.

Mitigation Strategies

Immediately restrict the auth.php registration endpoint to require authentication and validate the role parameter server-side. Default invalid roles to 'student' and enforce Role-Based Access Control (RBAC). Remove the open registration endpoint if possible and implement CSRF tokens, email verification, rate limiting, and audit logging.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-86275. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart