CVE-2026-90840

Description

A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function __construct of the file /application/controllers/admin/Dashboard.php of the component Admin Controllers. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit is publicly available and might be used.

CVSS Vector

References

• https://github.com/usernamevnq/CVEs/issues/1
• https://phpgurukul.com/
• https://vuldb.com/cve/CVE-2026-90840
• https://vuldb.com/submit/925615
• https://vuldb.com/vuln/403392
• https://vuldb.com/vuln/403392/cti