CVE-2026-90851

Description

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be used.

CVSS Vector

References

• https://github.com/usernamevnq/CVEs/issues/10
• https://phpgurukul.com/
• https://vuldb.com/cve/CVE-2026-90851
• https://vuldb.com/submit/926972
• https://vuldb.com/vuln/403406
• https://vuldb.com/vuln/403406/cti