CVE-2026-86290mediumCWE-74CWE-89

CVE-2026-86290: medium-severity vulnerability in SourceCodester Online Voting System

SourceCodester Online Voting System ajax.php save_category sql injection

Published · Updated

Follow this CVE+ Monitor Online Voting System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 6.9epss 0.4%
A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /voting/ajax.php?action=save_category. This manipulation of the argument Category causes sql injection. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
SourceCodester · Online Voting System
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — SourceCodester Online Voting System

In the same product, most dangerous first.

CVE-2026-86162MEDIUMSourceCodester Online Voting System ajax.php login sql injectionEPSS 0.4%CVE-2026-86161MEDIUMSourceCodester Online Voting System ajax.php delete_category sql injectionEPSS 0.4%CVE-2026-86160MEDIUMSourceCodester Online Voting System ajax.php delete_voting sql injectionEPSS 0.4%CVE-2026-86159MEDIUMSourceCodester Online Voting System ajax.php save_user sql injectionEPSS 0.4%