CVE-2026-3401Disclosure(senior-walter / web-based_pharmacy_product_management_system)

LOWCVSS 6.6 · MEDIUM

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part. This manipulation causes session expiration. Remote exploitation of the attack is possible. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-613

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • web-based_pharmacy_product_management_system

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 3 total mentions across 1 day

Affected systems

Products
web-based_pharmacy_product_management_system

1 version affected across 1 product

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-03-02: 3Technical Details · 2026-03-02: 103-02
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • CVE@CVEnew
    General

    CVE-2026-3401 A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part. This manipulation causes session expira… https://www.cve.org/CVERecord?id=CVE-2026-3401

    Post summary

    The text references CVE-2026-3401 but offers only a brief mention of a weakness affecting session expiration, lacking detailed technical information, PoC, or mitigation guidance.

    01010660
    56.6K followersView on X
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-3401 A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part. This manipulation causes session expira… https://www.cve.org/CVERecord?id=CVE-2026-3401 ----- Traducción: CVE-2026-3401 Se … http://infoflow.cloud`

    Post summary

    A new CVE-2026-3401 vulnerability has been disclosed for SourceCodester Web‑based Pharmacy Product Management System 1.0, with a brief mention of a session expiration manipulation.

    0000054
    55 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-3401 Session Hijacking Vulnerability in SourceCodester Pharmacy Management System 1.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3401

    Post summary

    A session hijacking vulnerability has been identified in SourceCodester Pharmacy Management System 1.0 (CVE-2026-3401), with no additional details on exploitation or mitigation provided.

    0000061
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appsenior-walterweb-based_pharmacy_product_management_system1.0--

Explore more