CVE-2026-108972 | SourceCodester Human Resource Management System 1.0 Employee Endpoint controller/employee.php session_start role/pfimg/EmpId improper authentication

October 11, 2026 Yanac

A vulnerability labeled as critical has been found in SourceCodester Human Resource Management System 1.0. Affected by this vulnerability is the function session_start of the file controller/employee.php of the component Employee Endpoint. The manipulation of the argument role/pfimg/EmpId results in improper authentication.

This vulnerability is known as CVE-2026-108972. It is possible to launch the attack remotely. Furthermore, an exploit is available.VulDB Recent EntriesRead More