CVE-2026-86293 - SourceCodester Simple Traffic Offense System Deletion Endpoint delete-user.php missing authentication

Back Back to CVE browser

MEDIUM

SourceCodester Simple Traffic Offense System Deletion Endpoint delete-user.php missing authentication

Published Sep 7, 2026

6.9

MEDIUM

CVSS 4.0

EPSS 0.76%

Description

A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. Affected by this vulnerability is an unknown functionality of the file delete-user.php of the component Deletion Endpoint. Executing a manipulation of the argument ID can lead to missing authentication. The attack may be launched remotely. The exploit has been published and may be used.

Affected products

Vendor SourceCodester Product Simple Traffic Offense System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SourceCodester

Simple Traffic Offense System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-287

Improper Authentication

CWE-306

Missing Authentication

References (6)

https://github.com/tan1540684326-QAQ/cve/issues/2
exploitissue-tracking
https://vuldb.com/cve/CVE-2026-86293
third-party-advisory
https://vuldb.com/submit/906278
third-party-advisory
https://vuldb.com/vuln/399455
vdb-entrytechnical-description
https://vuldb.com/vuln/399455/cti
signaturepermissions-required
https://www.sourcecodester.com/
product

Link	Providers	Tags
https://github.com/tan1540684326-QAQ/cve/issues/2		exploitissue-tracking
https://vuldb.com/cve/CVE-2026-86293		third-party-advisory
https://vuldb.com/submit/906278		third-party-advisory
https://vuldb.com/vuln/399455		vdb-entrytechnical-description
https://vuldb.com/vuln/399455/cti		signaturepermissions-required
https://www.sourcecodester.com/		product