CVE WatchJul 6, 2026

CVE-2026-14698

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. Impacted is an unknow

CVSS

6.3

Medium

EPSS

0.2%

p11

KEV

—

Exploit Today

0-100

Published: Jul 5, 2026 · Last modified: Jul 6, 2026 · CWE-284 · CWE-434

EPSS · 30d

0.2%EPSS · 30 days0.2%

2026-07-052026-07-17

Technical description

A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning Management and Examination System 1.0. Impacted is an unknown function of the file upload_files.php. Performing a manipulation results in unrestricted upload. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks.

Official references

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-562909.8 CRI

85.4%

KEV—76Joomlack Page Builder Improper Access Control Vulnerability10d CVE-2026-489089.8 CRI

72.6%

KEV—72JoomShaper SP Page Builder Unrestricted Upload of File with Dangerous Type Vulnerability10d CVE-2026-489399.8 CRI

71.5%

KEV—71iCagenda Unrestricted Upload of File with Dangerous Type Vulnerability7d CVE-2026-562919.8 CRI

53.7%

KEV—66Balbooa Forms Unrestricted Upload of File with Dangerous Type Vulnerability7d CVE-2023-388368.8 HIG

99.3%

——30File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks.9d CVE-2023-464747.2 HIG

97.3%

——29File Upload vulnerability PMB v.7.4.8 allows a remote attacker to execute arbitrary code and escalate privileges via a crafted PHP file uploaded to the start_import.php file.9d