CVE-2026-2009

MEDIUM

SourceCodester Gas Agency Management System 1.0 - Info Disclosure

Title source: llm
STIX 2.1

Description

A flaw has been found in SourceCodester Gas Agency Management System 1.0. This issue affects some unknown processing of the file /gasmark/php_action/createUser.php. Executing a manipulation can lead to improper access controls. It is possible to launch the attack remotely. The exploit has been published and may be used.

References (5)

Scores

CVSS v3 6.3
EPSS 0.0001
EPSS Percentile 1.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-266 CWE-284
Status published
Products (1)
mayurik/gas_agency_management_system 1.0
Published Feb 06, 2026
Tracked Since Feb 18, 2026