CVE-2026-90840

A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function __construct of the file /application/controllers/admin/Dashboard.php of the component Admin Controllers. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit is publicly available and might be used.

Score

CVSS 3.1 7.3 High

Status

Deferred - cna@vuldb.com

Published

2026-09-14

Last modified

2026-09-15

Weaknesses

CWE-287

Affected products

• Blood Donor Management System (Phpgurukul)

References

• https://github.com/usernamevnq/CVEs/issues/1
• https://phpgurukul.com/
• https://vuldb.com/cve/CVE-2026-90840
• https://vuldb.com/submit/925615
• https://vuldb.com/vuln/403392
• https://vuldb.com/vuln/403392/cti