CVE-2026-94048
6.6 MEDIUMpublic exploit availablePublished 2026-09-20 · Updated 2026-09-21
AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.
NVD description
A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulation of the argument role_id results in improper privilege management. The attack can be executed remotely. The exploit is now public and may be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L
Weaknesses
CWE-266, CWE-269
Public exploit & PoC references
All references
Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.
Related CVEs
- LOWCVE-2026-93968PoC
- MEDIUMCVE-2026-94047PoC
- HIGHCVE-2026-94425
- HIGHCVE-2025-71421PoC
- CRITICALCVE-2026-10059
- HIGHCVE-2026-12470
- CRITICALCVE-2026-13355
- MEDIUMCVE-2026-16071
Related by shared AI tags and CWE weakness class. Browse the full archive.