CVE-2026-90524

A security flaw has been discovered in jaychouchannel Tourism-Management-System up to 229956e20dbd4a80eeff14535e44d3099502af09. The impacted element is an unknown function of the component Update Endpoint. Performing a manipulation results in missing authentication. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The patch is named 84d8ec384f669df3985293dab293bb7b477efa64. It is suggested to install a patch to address this issue.

• CWE-287
• CWE-306

• https://github.com/jaychouchannel/Tourism-Management-System/
• https://github.com/jaychouchannel/Tourism-Management-System/commit/84d8ec384f669df3985293dab293bb7b477efa64
• https://github.com/jaychouchannel/Tourism-Management-System/issues/11
• https://vuldb.com/cve/CVE-2026-90524
• https://vuldb.com/submit/912245
• https://vuldb.com/vuln/403114
• https://vuldb.com/vuln/403114/cti

Published

Sep 13, 2026

Last Modified

Sep 14, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-90519A weakness has been identified in PHPGurukul Bank Locker Man…6.3
• CVE-2026-9052Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2026-90520A vulnerability has been found in jaychouchannel Tourism-Man…6.3
• CVE-2026-90521A vulnerability was found in jaychouchannel Tourism-Manageme…6.3
• CVE-2026-90522A vulnerability was determined in jaychouchannel Tourism-Man…7.3
• CVE-2026-90523A vulnerability was identified in jaychouchannel Tourism-Man…7.3
• CVE-2026-90525A weakness has been identified in itsourcecode Sales and Inv…6.3
• CVE-2026-90526A security vulnerability has been detected in SourceCodester…7.3
• CVE-2026-90527A vulnerability was detected in quequnlong shiyi-blog up to …4.3
• CVE-2026-90528A flaw has been found in TDuckApp tduck-platform up to 5.3. …3.5
• CVE-2026-90529A vulnerability has been found in DataEase up to 2.10.25/2.1…3.5
• CVE-2026-9053Mothra would respect a default value given by a website for …6.9