CVE-2026-2009

A flaw has been found in SourceCodester Gas Agency Management System 1.0. This issue affects some unknown processing of the file /gasmark/php_action/createUser.php. Executing a manipulation can lead to improper access controls. It is possible to launch the attack remotely. The exploit has been published and may be used.

Score

CVSS 3.1 6.5 Medium

Status

Analyzed - cna@vuldb.com

Published

2026-02-06

Last modified

2026-02-23

Weaknesses

CWE-266, CWE-284

Affected products

• Gas Agency Management System (Mayurik)
• Gas Agency Management System (Sourcecodester)

References

• https://github.com/Asim-QAZi/Improper-Access-Control-in-SourceCodester-Gas-Agency-Management-System
• https://vuldb.com/?ctiid.344591
• https://vuldb.com/?id.344591
• https://vuldb.com/?submit.743459
• https://www.sourcecodester.com/