CVE-2026-36236: Janobe Engineers Online Portal

Critical severity, CVSS 9.8. EPSS: 0.5% chance of exploitation in the next 30 days.

SourceCodester Engineers Online Portal v1.0 is vulnerable to SQL Injection in update_password.php via the new_password parameter.

Affected products

• Janobe Engineers Online Portal: version 1.0 only

Published 2026-04-10. Last modified 2026-06-17.