High severity7.3NVD Advisory· Published Sep 4, 2026· Updated Sep 4, 2026

CVE-2026-85512

Description

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This vulnerability affects unknown code of the file /admin/session.php. The manipulation of the argument ID results in missing authorization. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sourcecodester/Class and Exam Timetabling Systemllm-fuzzy
Range: = 1.0

Patches

Vulnerability mechanics

References

github.com/justconter/cve/issues/7nvd
vuldb.com/cve/CVE-2026-85512nvd
vuldb.com/submit/895057nvd
vuldb.com/vuln/398677nvd
vuldb.com/vuln/398677/ctinvd
www.sourcecodester.comnvd

News mentions

SourceCodester Timetabling System: Batch of 10 SQLi and Auth Bypass Flaws Disclosed
Vypr Intelligence · Sep 6, 2026

cvss	0.474
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000