CVE-2026-125075

A vulnerability has been found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. This impacts the function getMessage of the file create_admin.php of the component Admin Account Creation. Such manipulation of the argument e leads to missing authentication. The attack may be performed from remote. The exploit has been disclosed to the public and may be used.

• CWE-287
• CWE-306

• https://github.com/yuechuya/sourcecodester-vuln-reports/blob/main/reports/VULN-02-Unauthenticated-Admin-Creation.md
• https://vuldb.com/cve/CVE-2026-125075
• https://vuldb.com/submit/1041013
• https://vuldb.com/vuln/433179
• https://vuldb.com/vuln/433179/cti
• https://www.sourcecodester.com/

Published

Nov 9, 2026

Last Modified

Nov 10, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-125068FFmpeg through 9.0.2 contains a NULL pointer dereference vul…5.5
• CVE-2026-125069FFmpeg through 9.0.2 contains a NULL pointer dereference vul…4.7
• CVE-2026-125070FFmpeg through 9.0.2 contains a NULL pointer dereference vul…5.5
• CVE-2026-125071FFmpeg through 9.0.2 contains a NULL pointer dereference vul…4.7
• CVE-2026-125072FFmpeg through 9.0.2 contains a NULL pointer dereference vul…4.7
• CVE-2026-125073FFmpeg through 9.0.2 contains an infinite loop vulnerability…5.5
• CVE-2026-125076A vulnerability was found in SourceCodester Smart Attendance…7.3
• CVE-2026-125077A vulnerability was determined in SourceCodester Smart Atten…4.3
• CVE-2026-125078A security flaw has been discovered in SourceCodester Smart …6.3
• CVE-2026-125079A vulnerability was determined in D-Link DCS-6501LH 3.03.02.…5.3
• CVE-2026-125082A security flaw has been discovered in sunkaifei FlyCMS up t…3.5
• CVE-2026-125086A vulnerability has been found in D-Link M60 1.12.B01. Impac…10