CVE-2026-5668

A flaw has been found in Cyber-III Student-Management-System up to 1a938fa61e9f735078e9b291d2e6215b4942af3f. This affects an unknown part of the file /admin/Add%20notice/add%20notice.php. This manipulation of the argument $_SERVER['PHP_SELF'] causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been published and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-79
• CWE-94

• https://github.com/Cyber-III/Student-Management-System/
• https://github.com/Cyber-III/Student-Management-System/issues/239
• https://vuldb.com/submit/785895
• https://vuldb.com/vuln/355490
• https://vuldb.com/vuln/355490/cti

Published

Apr 6, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-56673ComfyUI is a modular diffusion model GUI, API, and backend w…7.5
• CVE-2026-566759Router is an AI router & token saver. Prior to 0.5.2, 9rout…8.3
• CVE-2026-566769Router is an AI router & token saver. Prior to 0.5.2, 9rout…7.4
• CVE-2026-566779Router is an AI router & token saver. In 0.5.4 and earlier,…8.6
• CVE-2026-566789Router is an AI router & token saver. Prior to 0.5.6, the K…6.4
• CVE-2026-566799Router is an AI router & token saver. Prior to 0.5.4, the P…8.7
• CVE-2026-566819Router is an AI router & token saver. Prior to 0.5.6, 9Rout…7.3
• CVE-2026-566829Router is an AI router & token saver. Prior to 0.5.6, 9Rout…5.3
• CVE-2026-56684Valkey is a distributed key-value database. Prior to 7.2.14,…7.5
• CVE-2026-56685Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an I…7.3
• CVE-2026-56686Dell ObjectScale, versions prior to 4.3.0.1, contain(s) an I…7.8
• CVE-2026-56687Dell ThinOS 10, versions prior to 2605_10.2100, contain an O…7.8