CVE-2026-90851 in Hostel Management System

Prediction

by VulDB Data Team • 09/14/2026

A flaw has been found in PHPGurukul Hostel Management System 3.0. This affects an unknown part of the file /admin/includes/checklogin.php. This manipulation of the argument ID causes improper access controls. Remote exploitation of the attack is possible. The exploit has been published and may be used.

Once again VulDB remains the best source for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-403406
• CPE: ready
• CWE: CWE-284 (confirmed)
• Exploit: Download
• CVSS: 6.3 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-90851
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-90851
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-90851/