CVE-2026-51876 | HKUDS DeepTutor 1.4.0 Book Confirmation Flow book_id authorization

October 1, 2026 Yanac

A vulnerability was found in HKUDS DeepTutor 1.4.0. It has been rated as critical. The affected element is an unknown function of the component Book Confirmation Flow. This manipulation of the argument book_id causes authorization bypass.

This vulnerability is registered as CVE-2026-51876. Remote exploitation of the attack is possible. No exploit is available.VulDB Recent EntriesRead More