CVE-2026-2177

HIGH

SourceCodester Prison Management System 1.0 - Session Fixation

Title source: llm

Description

A vulnerability has been found in SourceCodester Prison Management System 1.0. The impacted element is an unknown function of the component Login. The manipulation leads to session fixiation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

References (5)

[Third Party Advisory, VDB Entry] https://vuldb.com/?id.344880

[Permissions Required, VDB Entry] https://vuldb.com/?ctiid.344880

[Third Party Advisory, VDB Entry] https://vuldb.com/?submit.749485

[Exploit, Issue Tracking, Third Party Advisory] https://github.com/hater-us/CVE/issues/10

[Product] https://www.sourcecodester.com/

Scores

CVSS v3 7.3

EPSS 0.0006

EPSS Percentile 20.0%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-384

Status published

Products (1)

fast5/prison_management_system 1.0

Published Feb 08, 2026

Tracked Since Feb 18, 2026