CVE-2026-90840

5.5 mediumEPSS 0.7%

Medium (5.5). EPSS 0.7% chance of exploitation in the next 30 days.

A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function __construct of the file /application/controllers/admin/Dashboard.php of the component Admin Controllers. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit is publicly available and might be used.

Severity

CVSS 4.0

5.5 medium

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

7.3 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-287
Published: 2026-09-15
Modified: 2026-09-15
Record from: the NVD, synced 2026-10-19

References

https://github.com/usernamevnq/CVEs/issues/1
https://phpgurukul.com/
https://vuldb.com/cve/CVE-2026-90840
https://vuldb.com/submit/925615
https://vuldb.com/vuln/403392

Check your stack JSON