CVE-2026-10236

HIGH 7.3

SourceCodester Water Billing Management System User Management Endpoint Users.php save improper authorization

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

A vulnerability has been found in SourceCodester Water Billing Management System 1.0. This issue affects some unknown processing of the file /classes/Users.php?f=save of the component User Management Endpoint. Such manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.

CWE	CWE-285 CWE-266
Vendor	sourcecodester
Product	water billing management system
Published	Jun 1, 2026
Last Updated	Jun 1, 2026

Stay Ahead of the Next One

Get instant alerts for sourcecodester water billing management system

Be the first to know when new high vulnerabilities affecting sourcecodester water billing management system are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

SourceCodester / Water Billing Management System

1.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/367515 vuldb.com: https://vuldb.com/vuln/367515/cti vuldb.com: https://vuldb.com/cve/CVE-2026-10236 vuldb.com: https://vuldb.com/submit/823134 github.com: https://github.com/renzortega1337/Security-Research-/blob/main/Unauthenticated%20Admin%20Creation%20in%20PHP%20System.md sourcecodester.com: https://www.sourcecodester.com/

Credits

🔍 renzortega1337 (VulDB User)