CVE-2026-14608

MEDIUM

SourceCodester CET Automated Grading System with AI Predictive Analytics POST index.php view_student authorization

Title source: cna
STIX 2.1

Description

A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=view_student of the component POST Handler. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

References (5)

Core 5
Core References
Vdb Entry, Technical Description vdb-entry technical-description
VDB-376116 | SourceCodester CET Automated Grading System with AI Predictive Analytics POST index.php view_student authorization
https://vuldb.com/vuln/376116
Signature, Permissions Required signature permissions-required
VDB-376116 | CTI Indicators (IOB, IOC, IOA)
https://vuldb.com/vuln/376116/cti
Third Party Advisory third-party-advisory
CVE-2026-14608 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-14608
Third Party Advisory third-party-advisory
Submit #844625 | https://www.sourcecodester.com/ CET Automated Grading System with AI Predictive Analytics in PHP and MySQL 1.0 Insecure Direct Object Reference (IDOR)
https://vuldb.com/submit/844625

Scores

CVSS v3 4.3
EPSS 0.0022
EPSS Percentile 12.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-285 CWE-639
Status published
Products (1)
SourceCodester/CET Automated Grading System with AI Predictive Analytics 1.0
Published Jul 03, 2026
Tracked Since Jul 04, 2026