What is CVE-2026-14777?

CVE-2026-14777 is a medium-severity vulnerability in Sourcecodester Onlne Examination & Learning Management System, classified under Improper Access Control. CVSS score: 6.3/10. Published 2026-07-06.

How severe is CVE-2026-14777?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Arbitrary file upload in Sourcecodester Onlne Examination & Learning Management System

CVE-2026-14777

A weakness has been identified in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this issue is some unknown functionality of the file /announcements.php. Executing a manipulation can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks. The name of the affected product appears to have a typo in it.

EPSS: 0.002 (12.0th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Sourcecodester Onlne Examination & Learning Management System — versions 1.0

Weakness classification (CWE)

References

cna@vuldb.com (vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (exploit)
cna@vuldb.com (product)

Frequently asked questions

What is CVE-2026-14777?: CVE-2026-14777 is a medium-severity vulnerability in Sourcecodester Onlne Examination & Learning Management System, classified under Improper Access Control. CVSS score: 6.3/10. Published 2026-07-06.
How severe is CVE-2026-14777?: Medium severity. CVSS v3 base score is 6.3 out of 10.