VULNERABILITY INTELLIGENCE

CVE-2026-37347

CVSS score9.1 CRITICAL

EPSS probability0.38%

CISA KEVNot currently listed

Published2026-04-16

Last modified2026-06-17

Description

A flaw has been found in SourceCodester Client Database Management System 1.0. Affected is an unknown function of the file /fetch_manager_details.php of the component Endpoint. This manipulation of the argument manager_id causes improper authorization. The attack can be initiated remotely. The exploit has been published and may be used.