LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-3764 - Vulnerability Analysis

HighCVSS: 7.3

Last Updated: March 9, 2026

SourceCodester Client Database Management System - Broken Access Control

Published: March 8, 2026Updated: March 9, 2026PoC AvailableRemote Exploitable

Overview

SourceCodester Client Database Management System 1.0 contains a broken access control vulnerability caused by improper authorization in /superadmin_user_update.php, letting remote attackers modify data without proper permissions.

Severity & Score

Severity: High
CVSS Score: 7.3

Impact

Remote attackers can modify or access data without authorization, potentially compromising system integrity.

Mitigation

Update to the latest version or apply vendor patches addressing authorization checks.

Details

CVE ID
CVE-2026-3764
Severity
High
CVSS Score
7.3
Type
broken_access_control
Status
confirmed

CWE

  • CWE-266

CVSS Metrics

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L