CVE-2026-14609

MEDIUM

SourceCodester CET Automated Grading System with AI Predictive Analytics session fixiation

Title source: cna
STIX 2.1

Description

A vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This issue affects some unknown processing. The manipulation results in session fixiation. The attack can be executed remotely. The attack requires a high level of complexity. The exploitability is assessed as difficult. The exploit is now public and may be used.

References (5)

Core 5
Core References
Vdb Entry vdb-entry
VDB-376117 | SourceCodester CET Automated Grading System with AI Predictive Analytics session fixiation
https://vuldb.com/vuln/376117
Signature, Permissions Required signature permissions-required
VDB-376117 | CTI Indicators (IOB, IOC)
https://vuldb.com/vuln/376117/cti
Third Party Advisory third-party-advisory
CVE-2026-14609 | CVE Analysis and Report
https://vuldb.com/cve/CVE-2026-14609
Third Party Advisory third-party-advisory
Submit #844641 | https://www.sourcecodester.com/ CET Automated Grading System with AI Predictive Analytics in PHP and MySQL 1.0 Session Fixation
https://vuldb.com/submit/844641

Scores

CVSS v3 5.6
EPSS 0.0032
EPSS Percentile 24.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-384
Status published
Products (1)
SourceCodester/CET Automated Grading System with AI Predictive Analytics 1.0
Published Jul 03, 2026
Tracked Since Jul 04, 2026