CVE-2026-2177
High · 7.3CVSS
7.3
EPSS
0.4%
Published
Feb 8, 2026
CISA due date
—
The record
A vulnerability has been found in SourceCodester Prison Management System 1.0. The impacted element is an unknown function of the component Login. The manipulation leads to session fixiation. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-107226 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTTP… CWE-384
- CVE-2026-64857 tirreno, a security framework, has a session fixation issue in versions prior to 0.10.0. CWE-384
- CVE-2026-86674 A vulnerability was found in ningzichun Student Management System up to… CWE-384
- CVE-2026-76196 Photoshop Mobile is affected by a Session Fixation vulnerability that could result in… CWE-384
- CVE-2026-86279 A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Management &… CWE-384
- CVE-2026-85238 MISP contains a session fixation vulnerability in the CustomAuth authentication (a custom… CWE-384
- CVE-2026-84652 In Jenkins 2.579 and earlier, LTS 2.568.2 and earlier, Jenkins does not rotate the… CWE-384
- CVE-2026-18527 IBM Administration Runtime Expert for i 1R1M0 IBM Application Runtime Expert (ARE) for i… CWE-384