CVE-2026-90518

2.1 lowEPSS 0.4%

Low (2.1). EPSS 0.4% chance of exploitation in the next 30 days.

A security flaw has been discovered in PHPGurukul Bank Locker Management System 1.0. This impacts an unknown function of the file sidebar.php. The manipulation of the argument UserType results in improper access controls. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

6.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWEs: CWE-266, CWE-284
Published: 2026-09-13
Modified: 2026-09-14
Record from: the NVD, synced 2026-10-19

References

https://github.com/wakakakaaaaha/vuln/issues/3
https://phpgurukul.com/
https://vuldb.com/cve/CVE-2026-90518
https://vuldb.com/submit/912176
https://vuldb.com/vuln/403105

Check your stack JSON