CVE-2026-86215mediumCWE-613

CVE-2026-86215: medium-severity vulnerability in Mstfakts College-Management-System

Mstfakts College-Management-System Logout server.php session expiration

Published · Updated

Follow this CVE+ Monitor College-Management-System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 5.3epss 0.4%
A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument log_out leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
Mstfakts · College-Management-System
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — Mstfakts College-Management-System

In the same product, most dangerous first.

CVE-2026-95828MEDIUMMstfakts College-Management-System Authentication server.php session_start session fixiationEPSS 0.7%CVE-2026-86213MEDIUMMstfakts College-Management-System Search university.php mysqli_query sql injectionEPSS 0.4%