CVE-2026-86215
MediumCVSS 4.3Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php in the Logout Handler component. Manipulation of the argument log_out leads to session expiration. The attack can be launched remotely. The exploit is publicly available. This product uses rolling releases, so version details are not available. The project was informed but has not responded.
Risk Assessment
An attacker can force session expiration, potentially disrupting user work or leveraging the mechanism for further attacks such as session hijacking.
Recommendation
Monitor public exploits and contact the vendor for a fix. Temporarily restrict access or apply additional session protections.
Other vulnerabilities in College-Management-System
Original NVD description (English source)
A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument log_out leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS