CVE-2026-86208

HIGHCVSS 7.3

Description

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /delete_teacher.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

Timeline

Published:September 6th, 2026 10:17 AM

Last modified:September 6th, 2026 10:17 AM

CVSS Scoring

CVSS v3: 7.3 (HIGH)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CVSS v2: 7.5

Weaknesses (CWE)

CWE-74 CWE-89

References & Reports

Advisories, patches, and third-party reports

https://github.com/justconter/cve/issues/10
https://vuldb.com/cve/CVE-2026-86208
https://vuldb.com/submit/896588
https://vuldb.com/vuln/399343
https://vuldb.com/vuln/399343/cti
https://www.sourcecodester.com/

Source: NIST NVD · Data may lag official sources by up to one minute