Vulnerability in N/a

CVE-2026-37598

SourceCodester Patient Appointment Scheduler System v1.0 is vulnerable to arbitrary code execution (RCE) via /scheduler/classes/SystemSettings.php?f=update_settings.

EPSS: 0.001 (19.7th percentile) — read the EPSS interpretation.

Affected products

  • N/a — versions n/a

References