CVE-2026-90851

2.1 lowEPSS 0.4%

Low (2.1). EPSS 0.4% chance of exploitation in the next 30 days.

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be used.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

CVSS 3.1

6.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS: 0.4% chance of exploitation in the next 30 days; higher than 30% of CVEs (scores of 2026-10-31)
CWEs: CWE-266, CWE-284
Published: 2026-09-15
Modified: 2026-09-15
Record from: the NVD, synced 2026-10-19

References

https://github.com/usernamevnq/CVEs/issues/10
https://phpgurukul.com/
https://vuldb.com/cve/CVE-2026-90851
https://vuldb.com/submit/926972
https://vuldb.com/vuln/403406

Check your stack JSON