CVE-2026-3761 - Vulnerability Analysis

Overview

SourceCodester Client Database Management System 1.0 contains a broken access control caused by improper authorization in /superadmin_user_delete.php endpoint, letting remote attackers perform unauthorized actions, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can perform unauthorized actions, potentially leading to data modification or user management compromise.

Mitigation

Update to the latest version or apply vendor patches addressing authorization checks.

References

• https://gist.github.com/Adarshh-A/dd8884d768d9dde9072fe5efce453824
• https://vuldb.com/?ctiid.349739
• https://vuldb.com/?id.349739
• https://vuldb.com/?submit.768120
• https://www.sourcecodester.com/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner