CVE-2026-9438

A vulnerability was found in yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203. This impacts an unknown function of the file courseDel.php. The manipulation of the argument ID results in improper control of resource identifiers. The attack may be performed from remote. The exploit has been made public and could be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-99

• https://github.com/yashpokharna2555/StudentManagementSystem/
• https://github.com/yashpokharna2555/StudentManagementSystem/issues/1
• https://vuldb.com/submit/813961
• https://vuldb.com/vuln/365419
• https://vuldb.com/vuln/365419/cti

Published

May 25, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-9437A vulnerability has been found in DTStack Taier 1.4.0. This …6.3
• CVE-2026-94372MISP contains a stored cross-site scripting (XSS) vulnerabil…6.3
• CVE-2026-94373MISP contains a DOM-based cross-site scripting (XSS) vulnera…6.3
• CVE-2026-94374MISP contains an insecure direct object reference vulnerabil…8.3
• CVE-2026-94376The Better Messages – Chat Rooms, Group Chat, Private Messag…6.4
• CVE-2026-94379The login() function in MISP's UsersController.php contained…6.9
• CVE-2026-94381MISP has a security issue that can let a user gain more acce…8.7
• CVE-2026-94382Beszel before 0.19.0 contains an insecure direct object refe…4.2
• CVE-2026-94383The MISP blocklist workflow module accepted a user-supplied …8.6
• CVE-2026-94384Missing authorization in Amazon amazon-connect-salesforce-la…8.1
• CVE-2026-94387Aureus ERP before 1.6.0 contains a stored cross-site scripti…5.4
• CVE-2026-9439A vulnerability was determined in Edimax BR-6675nD 1.12. Aff…6.3