Sourcecodester Online Voting System vulnerabilities

5 CVEs affecting Sourcecodester Online Voting System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-86290, published 2026-09-07.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-86290, published 2026-09-07. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A weakness has been identified in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /voting/ajax.php?action=save_category. This manipulation of the argument…
CVE-2026-86162, published 2026-09-06. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was determined in SourceCodester Online Voting System 1.0. This affects an unknown function of the file /ajax.php?action=login. Executing a manipulation of the argument Username can…
CVE-2026-86161, published 2026-09-06. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Online Voting System 1.0. The impacted element is an unknown function of the file /ajax.php?action=delete_category. Performing a manipulation of the…
CVE-2026-86160, published 2026-09-06. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been found in SourceCodester Online Voting System 1.0. The affected element is an unknown function of the file /ajax.php?action=delete_voting. Such manipulation of the argument ID…
CVE-2026-86159, published 2026-09-06. High severity, CVSS 7.3. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw has been found in SourceCodester Online Voting System 1.0. Impacted is an unknown function of the file /ajax.php?action=save_user. This manipulation of the argument ID causes sql injection.…