CVE-2026-3401

Katalog CVE

CVSS 6.6 · Medium EPSS 0,51%

Kerentanan Insufficient Session Expiration pada senior-walter web-based pharmacy product management system. Skor CVSS 3.1 6.6 (Medium) menurut NVD.

Deskripsi (NVD)

A weakness has been identified in SourceCodester Web-based Pharmacy Product Management System 1.0. This affects an unknown part. This manipulation causes session expiration. Remote exploitation of the attack is possible. The complexity of an attack is rather high. It is indicated that the exploitability is difficult. The exploit has been made available to the public and could be used for attacks.

Rincian

Terbit di NVD

2 Maret 2026

Terakhir diubah

17 Juni 2026

Status NVD

Analyzed

CVSS 3.1

6.6 (Medium), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-613: Insufficient Session Expiration

EPSS (30 hari)

0,51% peluang dieksploitasi; lebih tinggi dari 42,1% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://github.com/hiranerakkot/Web-based-Pharmacy-Product-Management-System/blob/main/README.md exploit · advisory pihak ketiga
• https://vuldb.com/?id.348296 advisory pihak ketiga · vdb entry
• https://vuldb.com/?submit.762795 advisory pihak ketiga · vdb entry
• https://vuldb.com/?ctiid.348296 vdb entry
• https://www.sourcecodester.com/ product