CVE-2026-86292
HighCVSS 7.3Summary
A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0 in an unknown function of the file saveuser.php in the User Creation component. Manipulation of the argument position results in missing authentication. The attack may be initiated remotely and the exploit is now public.
Risk Assessment
A remote attacker could exploit the missing authentication to create unauthorized user accounts, potentially leading to unauthorized system access and data integrity compromise.
Recommendation
Apply vendor patches immediately or implement proper authentication mechanisms for user creation operations.
Other vulnerabilities in SourceCodester Simple Traffic Offense System
See all- CVE-2026-86294Medium
In SourceCodester Simple Traffic Offense System 1.0, a vulnerability was found in the file save-settings.php of the Settings Update Endpoint component. Manipulation of the site_name/site_desc arguments leads to cross-site scripting. Remote exploitation is possible, and the exploit has been disclosed.
- CVE-2026-86293Medium
In SourceCodester Simple Traffic Offense System 1.0, a vulnerability was found in the file delete-user.php of the Deletion Endpoint component. Manipulation of the ID argument leads to missing authentication. The attack can be launched remotely, and the exploit has been published.
Original NVD description (English source)
A vulnerability was detected in SourceCodester Simple Traffic Offense System 1.0. Affected is an unknown function of the file saveuser.php of the component User Creation. Performing a manipulation of the argument position results in missing authentication. The attack may be initiated remotely. The exploit is now public and may be used.