CVE-2026-86214

HighCVSS 7.3

Published: 06/09/2026(UTC)Updated: 08/09/2026(UTC)Translated: 06/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.39%

32th percentile - higher than 32% of all known CVEs

Summary

A vulnerability was found in Mstfakts College-Management-System in Front-end/login.php. Manipulation of the email argument causes improper authentication. The attack can be performed remotely. The exploit has been publicly disclosed and may be utilized. The project has not responded.

Risk Assessment

Unauthorized access to user accounts may lead to data confidentiality breach and system compromise.

Recommendation

Since no fix is available, consider additional security measures such as a web application firewall and monitoring login logs.

Other vulnerabilities in Mstfakts College-Management-System

CVE-2026-86213High
A SQL injection vulnerability was found in Mstfakts College-Management-System in the mysqli_query function of Front-end/university.php (Search Handler). Manipulation of book_name/book_author arguments results in SQL injection. The attack can be performed remotely. The exploit has been made public. The project has not responded.

Original NVD description (English source)

A vulnerability was determined in Mstfakts College-Management-System. Impacted is an unknown function of the file Front-end/login.php. This manipulation of the argument email causes improper authentication. It is possible to initiate the attack remotely. The exploit has been publicly disclosed and may be utilized. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS