CVE-2026-11476General

LOWCVSS 2.1 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this issue is the function edit-admin of the file controllers/AdminController.php of the component Profile Update Endpoint. The manipulation of the argument isadmin leads to improper authorization. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. This product follows a rolling release approach for continuous delivery, so version details for affected or updated releases are not provided. The project was informed of the problem early through an issue report but has not responded yet.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-266CWE-285

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

2 mentions across 1 observed day

What's happening

General: 2 classified signals
2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d

Signal classification1 categories

General

2100.0%

Referenced assets2 URLs

By indicator

Full discourse2 posts

Infoflowcloud@infoflowcloud137d
General
🚨*CVE* CVE-2026-11476 A security vulnerability has been detected in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this issue is the functio… https://www.cve.org/CVERecord?id=CVE-2026-11476 ----- Traducción: CVE-2026-11476 Se … http://infoflow.cloud`
Post summary
The content briefly announces the existence of CVE‑2026‑11476 in a specific GitHub repository, providing a link to the CVE record but no additional technical details, PoC, or mitigation information.
0000024
79 followersView on X
CVE@CVEnew137d
General
CVE-2026-11476 A security vulnerability has been detected in Kushan2k student-management-system up to f16a4ceaddd6729c4b306ed4641cda3176c1ef2a. Affected by this issue is the functio… https://www.cve.org/CVERecord?id=CVE-2026-11476
Post summary
The text notes the detection of CVE-2026‑11476 in the Kushan2k student‑management‑system but provides no additional details, PoC, exploit, patch, or technical information.
00000220
57.6K followersView on X

Explore more

Back to dashboard