CVE-2026-3762 - Vulnerability Analysis

Overview

SourceCodester Client Database Management System 1.0/3.1 contains a broken access control caused by improper authorization in /superadmin_delete_manager.php, letting remote attackers perform unauthorized actions, exploit requires no special privileges.

Severity & Score

Impact

Remote attackers can perform unauthorized actions, potentially leading to data modification or privilege escalation.

Mitigation

Update to the latest version or apply patches addressing authorization checks.

References

• https://gist.github.com/Adarshh-A/1aae387a3cf4ea05c871ddafc64d0348
• https://vuldb.com/?ctiid.349740
• https://vuldb.com/?id.349740
• https://vuldb.com/?submit.768122
• https://www.sourcecodester.com/

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner