CVE-2026-90517 in Bank Locker Management System

Prediction

by VulDB Data Team • 09/12/2026

A vulnerability was identified in PHPGurukul Bank Locker Management System 1.0. This affects an unknown function of the file /blms/view-assign-locker.php. The manipulation of the argument ltid leads to authorization bypass. The attack may be initiated remotely. The exploit is publicly available and might be used.

Be aware that VulDB is the high quality source for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-403104
• CPE: ready
• CWE: CWE-639 (confirmed)
• Exploit: Download
• CVSS: 5.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low
• Sector: Finance

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-90517
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-90517
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-90517/