CVE-2026-14609

24th percentile — higher than 24% of all known CVEs

A session fixation vulnerability was detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The issue stems from improper data processing, allowing an attacker to fixate a user's session. The attack is remote but requires high complexity and is assessed as difficult to exploit.

The risk for the organization is the potential hijacking of an authenticated user's session, leading to unauthorized access to grading system data and functions. Although difficult, the public availability of an exploit increases the likelihood of exploitation.

Immediately update the system to the latest version or apply security patches from the vendor. Additionally, implement session fixation protection mechanisms, such as regenerating the session ID after login.