CVE-2026-2177

CWE-3843 documents3 sources
Severity
6.9MEDIUM
EPSS
0.1%
top 80.62%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Prison Management SystemFast5 Prison Management System
Timeline
PublishedFeb 8

Description

A vulnerability has been found in SourceCodester Prison Management System 1.0. The impacted element is an unknown function of the component Login. The manipulation leads to session fixiation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-9p9c-7xfp-rpg5: A vulnerability has been found in SourceCodester Prison Management System 1↗2026-02-08
▶
CVEList
SourceCodester Prison Management System Login session fixiation↗2026-02-08
▶
CVE-2026-2177 (MEDIUM CVSS 6.9) | A vulnerability has been found in S | cvebase.io