Threat Intelligence / CVE / CVE-2026-14776

CVE-2026-14776

CVSS 6.3 (MEDIUM) · EPSS 0.2% · Priority 3.6/10 · Published 2026-07-05

As of 2026-07-05, CVE-2026-14776 is a CVSS 6.3 (MEDIUM-severity) vulnerability. EPSS exploitation probability 0.2%. Threadlinqs Intelligence tracks 0 threats exploiting it.

Last updated: 2026-07-05

A security flaw has been discovered in SourceCodester Onlne Examination & Learning Management System 1.0. Affected by this vulnerability is the function pathinfo of the file /upload_files.php of the component Filename Extension. Performing a manipulation results in unrestricted upload. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks. The name of the affected product appears to have a typo in it.

CVSS v3 vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Weaknesses (CWE)

CWE-434, CWE-284

References

Full detection coverage & IOCs for threats exploiting CVE-2026-14776 are available via the Threadlinqs MCP server (Purple tier). View plans →

← all vulnerabilities · Markdown version · Threadlinqs Intelligence

Enriched from CVE.org, NVD (this product uses the NVD API but is not endorsed or certified by the NVD), FIRST EPSS, CISA KEV, and GitHub Security Advisories.