CVE-2026-90840

EUVD-2026-78222
A vulnerability was identified in PHPGurukul Blood Donor Management System 1.0. Affected is the function __construct of the file /application/controllers/admin/Dashboard.php of the component Admin Controllers. The manipulation leads to improper authentication. The attack can be initiated remotely. The exploit is publicly available and might be used.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
VulDBCNA
7.3 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Base Score
CVSS 3.x
EPSS Score
Percentile: Unknown
Early Detection
Affected products identified ahead of NVD analysis through intelligence sources.
VendorProductVersionSource
phpgurukulblood_donor_management_system
1.0
CNA
Common Weakness Enumeration
References
https://github.com/usernamevnq/CVEs/issues/1
https://phpgurukul.com/
https://vuldb.com/cve/CVE-2026-90840
https://vuldb.com/submit/925615
https://vuldb.com/vuln/403392
https://vuldb.com/vuln/403392/cti