CVE-2026-3486

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability has been found in itsourcecode College Management System 1.0. This vulnerability affects unknown code of the file /admin/student-fee.php. Such manipulation of the argument roll_no leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-74CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Mar 3, 2026
Last modified
Jun 17, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-348606.5Access control vulnerability in the memo module. Impact: Successful exploitation of this vulnerability will affect availability and confidenCVE-2026-348614.7Race condition vulnerability in the thermal management module. Impact: Successful exploitation of this vulnerability may affect availabilityCVE-2026-348624.7Race condition vulnerability in the power consumption statistics module. Impact: Successful exploitation of this vulnerability may affect avCVE-2026-348635.5Out-of-bounds write vulnerability in the file system. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-348645.5Boundary-unlimited vulnerability in the application read module. Impact: Successful exploitation of this vulnerability may affect availabiliCVE-2026-348659.1Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confiCVE-2026-348665.1Out-of-bounds write vulnerability in the WEB module.Impact: Successful exploitation of this vulnerability will affect availability and confiCVE-2026-348675.6Double free vulnerability in the multi-mode input system. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-34877.2A vulnerability was found in itsourcecode College Management System 1.0. This issue affects some unknown processing of the file /admin/classCVE-2026-348716.7An issue was discovered in Mbed TLS before 3.6.6 and 4.x before 4.1.0 and TF-PSA-Crypto before 1.1.0. There is a Predictable Seed in a PseudCVE-2026-348729.1An issue was discovered in Mbed TLS 3.5.x and 3.6.x through 3.6.5 and TF-PSA-Crypto 1.0. There is a lack of contributory behavior in FFDH duCVE-2026-348739.1An issue was discovered in Mbed TLS 3.5.0 through 4.0.0. Client impersonation can occur while resuming a TLS 1.3 session.
CVE-2026-3486: High severity, CVSS 7.2 | Vulnix