CVE-2026-86280 PUBLISHED

A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0. This affects an unknown function of the file cict_portal.sql. Such manipulation leads to cleartext storage of sensitive information. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

• BI1IHA (VulDB User) reporter

• VDB-399441 | SourceCodester Syllabus-Aligned Learning Management & Examination System cict_portal.sql cleartext storage
• VDB-399441 | CTI Indicators (IOB, IOC, TTP, IOA)
• CVE-2026-86280 | CVE Analysis and Report
• Submit #904881 | SourceCodester Syllabus-Aligned Learning Management & Examination System 1.0 Information Disclosure
• https://github.com/hackliu/Vulnerability-Reports/blob/master/Syllabus%20Aligned%20Learning%20Management%20Examination%20System/VULN-07-Sensitive-Information-Exposure.md
• https://www.sourcecodester.com/

• Cleartext Storage of Sensitive Information CWE
• Cryptographic Issues CWE