VulnSocial

CVE-2026-11474Disclosure

LOWCVSS 5.5 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security flaw has been discovered in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected is an unknown function of the file service/RegisterService.php of the component Registration Endpoint. Performing a manipulation of the argument stimg results in unrestricted upload. The attack may be initiated remotely. The exploit has been released to the public and may be used for attacks. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-284CWE-434

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-06-08: 3Technical Details · 2026-06-08: 106-08
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-11474 A security flaw has been discovered in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected is an unknown function of the file … https://www.cve.org/CVERecord?id=CVE-2026-11474 ----- Traducción: CVE-2026-11474 Se … http://infoflow.cloud`

    Post summary

    The post briefly announces CVE‑2026‑11474 in the Kushan2k student‑management‑system, citing a commit hash and linking to the CVE record, without any mention of exploitation, PoC, or patch availability.

    0000026
    79 followersView on X
  • CVE@CVEnew
    General

    CVE-2026-11474 A security flaw has been discovered in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected is an unknown function of the file … https://www.cve.org/CVERecord?id=CVE-2026-11474

    Post summary

    The CVE-2026-11474 refers to a discovered flaw in the Kushan2k student-management-system, but the provided description lacks technical specifics, exploitation evidence, or remediation guidance.

    00000316
    57.6K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-11474 Unrestricted File Upload in Kushan2k Student-Management-System Registration Endpoint https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-11474

    Post summary

    The entry announces a new CVE (CVE-2026-11474) describing an unrestricted file upload vulnerability in the Kushan2k Student‑Management‑System registration endpoint, but it does not provide PoC, exploit code, or patch information.

    0000046
    4.0K followersView on X

Explore more

Back to dashboard