CVE-2026-10236
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
A vulnerability in SourceCodester Water Billing Management System 1.0 affects unknown processing in the file /classes/Users.php?f=save of the User Management Endpoint component, leading to improper authorization. The attack can be launched remotely and the exploit has been disclosed publicly.
Risk Assessment
An attacker can bypass authorization mechanisms and gain unauthorized access to user management functions, potentially leading to data theft or privilege escalation.
Recommendation
Implement proper access controls for the User Management Endpoint and apply a vendor-supplied patch.
Other vulnerabilities in SourceCodester Water Billing Management System
Original NVD description (English source)
A vulnerability has been found in SourceCodester Water Billing Management System 1.0. This issue affects some unknown processing of the file /classes/Users.php?f=save of the component User Management Endpoint. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.