HIGHVulnerability

CVE-2026-86208

A security flaw has been discovered in SourceCodester Class and Exam Timetabling System 1.0. This impacts an unknown function of the file /delete_teacher.php. The manipulation of the argument ID results in sql injection. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

Properties

severity
HIGH
score
7.3
cve_id
CVE-2026-86208
signal_observed_at
2026-09-16T21:37:07+00:00
vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
published_at
2026-09-06T10:17:14.933
last_modified
2026-09-10T18:18:10.020

Related Entities (3)

DESCRIBED_BY (1)

[Source]NVD

HAS_WEAKNESS (2)

[Weakness]Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
[Weakness]Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

Explore deeper with Ninja Signal's threat intelligence graph

CVE-2026-86208 — Ninja Signal Threat Intelligence | Ninja Signal