CVE-2026-1141

A vulnerability was identified in PHPGurukul News Portal 1.0. The affected element is an unknown function of the file /admin/add-subadmins.php of the component Add Sub-Admin Page. Such manipulation leads to improper authorization. The attack can be launched remotely. The exploit is publicly available and might be used.

• CWE-266
• CWE-285

• https://github.com/Asim-QAZi/BrokenAccessControl-News-Portal-Project-in-PHP-and-MySQL-in-PHPGurukulExploit, Mitigation, Third Party Advisory
• https://phpgurukul.com/Product
• https://vuldb.com/?ctiid.341733Permissions Required, VDB Entry
• https://vuldb.com/?id.341733Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.735483Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.736668

Published

Jan 19, 2026

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-11404Cesanta Mongoose before 7.22 contains an out-of-bounds read …8.7
• CVE-2026-11405The web server binary /bin/httpd contains a hidden backdoor …9.8
• CVE-2026-11406A vulnerability was determined in GL.iNet MT3000 up to 4.4.5…6.3
• CVE-2026-11407Pimcore CMS/DXP version 12.3.8 contains a sandbox bypass vul…8.6
• CVE-2026-11408A vulnerability was identified in vertex-app vertex up to 20…6.3
• CVE-2026-11409An authenticated OS command injection vulnerability exists i…7.2
• CVE-2026-11410An authenticated OS command injection vulnerability exists i…7.2
• CVE-2026-11411A security flaw has been discovered in iAI Lab PDF AI App 4.…4.4
• CVE-2026-11412A weakness has been identified in Jinher OA C6. The affected…6.3
• CVE-2026-11413A security vulnerability has been detected in JingDong JD Cl…8.8
• CVE-2026-11414A hard-coded cryptographic key is used by Altium Enterprise …9.8
• CVE-2026-11416MoviePilot contains a path traversal vulnerability in the Al…8.1