CVE-2026-90517

PHPGurukul Bank Locker Management System 1.0 contains an authorization bypass vulnerability in the file /blms/view-assign-locker.php. An unauthenticated remote attacker can manipulate the ltid argument to bypass authorization controls, resulting in a partial confidentiality impact (CVSS 3.1 base ...