CVE-2026-125076

A vulnerability was found in SourceCodester Smart Attendance System with QR Code Scanner 1.0. Affected is an unknown function of the file api/attendance_handler.php of the component JSON Endpoint. Performing a manipulation of the argument student_code results in missing authentication. It is possible to initiate the attack remotely. The exploit has been made public and could be used.

• CWE-287
• CWE-306

• https://github.com/yuechuya/sourcecodester-vuln-reports/blob/main/reports/VULN-03-Unauthenticated-Attendance-Write.md
• https://vuldb.com/cve/CVE-2026-125076
• https://vuldb.com/submit/1041014
• https://vuldb.com/vuln/433180
• https://vuldb.com/vuln/433180/cti
• https://www.sourcecodester.com/

Published

Nov 10, 2026

Last Modified

Nov 10, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-125069FFmpeg through 9.0.2 contains a NULL pointer dereference vul…4.7
• CVE-2026-125070FFmpeg through 9.0.2 contains a NULL pointer dereference vul…5.5
• CVE-2026-125071FFmpeg through 9.0.2 contains a NULL pointer dereference vul…4.7
• CVE-2026-125072FFmpeg through 9.0.2 contains a NULL pointer dereference vul…4.7
• CVE-2026-125073FFmpeg through 9.0.2 contains an infinite loop vulnerability…5.5
• CVE-2026-125075A vulnerability has been found in SourceCodester Smart Atten…7.3
• CVE-2026-125077A vulnerability was determined in SourceCodester Smart Atten…4.3
• CVE-2026-125078A security flaw has been discovered in SourceCodester Smart …6.3
• CVE-2026-125079A vulnerability was determined in D-Link DCS-6501LH 3.03.02.…5.3
• CVE-2026-125082A security flaw has been discovered in sunkaifei FlyCMS up t…3.5
• CVE-2026-125086A vulnerability has been found in D-Link M60 1.12.B01. Impac…10
• CVE-2026-125087A vulnerability was found in Michael-A-Kuykendall Shimmy up …7.3