CVE-2026-30521 - Vulnerability Analysis

Overview

SourceCodester Loan Management System v1.0 contains a business logic vulnerability caused by improper server-side validation allowing authenticated attackers to create loan plans with negative interest rates by bypassing client-side restrictions.

Severity & Score

Impact

Authenticated attackers can create loan plans with negative interest rates, potentially disrupting financial calculations and business operations.

Mitigation

Update to the latest version with proper server-side validation to prevent negative interest rates.

References

• https://github.com/meifukun/Web-Security-PoCs/blob/main/Loan-Management-System/BusinessLogic-LoanPlan-NegativeInterest.md

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner