CVE-2026-90856

SourceCodester College Notes Gallery Management System 1.0 is affected by an improper privilege management vulnerability in the Registration Flow component. The flaw resides in the signup.php file, where manipulation of the role argument allows a remote, unauthenticated attacker to gain elevated ...

EUVD-2026-42917

A vulnerability was detected in Eleveo Call Recording Software 9.7.0. The impacted element is an unknown function of the file /callrec/userAddAction.do. Performing a manipulation of the argument role results in improper authorization. It is possible to initiate the attack remotely. The exploit is...

CVE-2026-9409

A flaw has been found in Sushmi-pal Invoice-System up to a0a3faa16dee2621b231ae227333f5761607283b. This affects an unknown part of the file /user of the component User Management Handler. This manipulation of the argument role causes improper authorization. It is possible to initiate the attack...