CVE-2026-14608 PUBLISHED

A security vulnerability has been detected in SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. This vulnerability affects unknown code of the file /index.php?action=view_student of the component POST Handler. The manipulation of the argument ID leads to authorization bypass. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

• Abhay mp (VulDB User) reporter
• VulDB Vulnerability Moderation Team coordinator

• VDB-376116 | SourceCodester CET Automated Grading System with AI Predictive Analytics POST index.php view_student authorization
• VDB-376116 | CTI Indicators (IOB, IOC, IOA)
• CVE-2026-14608 | CVE Analysis and Report
• Submit #844625 | https://www.sourcecodester.com/ CET Automated Grading System with AI Predictive Analytics in PHP and MySQL 1.0 Insecure Direct Object Reference (IDOR)
• https://www.sourcecodester.com/

• Authorization Bypass CWE
• Improper Authorization CWE