CVE-2026-86215: Mstfakts College-Management-System Logout server.php session expiration
A vulnerability was identified in Mstfakts College-Management-System. The affected element is an unknown function of the file Front-end/server.php of the component Logout Handler. Such manipulation of the argument logout leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker can launch the attack remotely, but the vulnerability requires low-level privileges. No user interaction is required.
What is the practical impact of a successful attack?
Successful manipulation of the log_out argument causes session expiration. The available scoring indicates an integrity impact, with no reported confidentiality or availability impact.
Is exploit code available?
Yes. The exploit is publicly available and may be used by attackers.
Which versions are affected or fixed?
Version-specific affected and updated release information is not available because the project uses rolling releases. The project was notified through an issue report but had not responded at the time of publication.