CVE-2026-108975: sourcecodester library management system Improper Access Control

Vulnerability summary

CVE-2026-108975 is a high (CVSS 7.5) Improper Access Control vulnerability in sourcecodester library management system. EPSS estimates a 0.29% chance of exploitation in the next 30 days, higher than 20% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 13-10-2026
   PublishedVulnerability first disclosed.
2. 14-10-2026
   Last modifiedVulnerability information updated.

Description

A security flaw has been discovered in SourceCodester Library Management System 1.0. This vulnerability affects the function move_uploaded_file of the file admin/add_admin.php. Performing a manipulation of the argument image results in unrestricted upload. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

• CWE-284Improper Access ControlThe product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
• CWE-434Unrestricted Upload of File with Dangerous TypeThe product allows the upload or transfer of dangerous file types that are automatically processed within its environment.