CVE-2026-3764 - Vulnerability Analysis
HighCVSS: 7.3Last Updated: March 9, 2026
SourceCodester Client Database Management System - Broken Access Control
Published: March 8, 2026Updated: March 9, 2026PoC AvailableRemote Exploitable
Overview
SourceCodester Client Database Management System 1.0 contains a broken access control vulnerability caused by improper authorization in /superadmin_user_update.php, letting remote attackers modify data without proper permissions.
Severity & Score
Severity: High
CVSS Score: 7.3
Impact
Remote attackers can modify or access data without authorization, potentially compromising system integrity.
Mitigation
Update to the latest version or apply vendor patches addressing authorization checks.
References
Related Resources
Details
- CVE ID
- CVE-2026-3764
- Severity
- High
- CVSS Score
- 7.3
- Type
- broken_access_control
- Status
- confirmed
CWE
- CWE-266
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L