A security vulnerability has been detected in dhikshitha29 Insurance-Management-System… (CVE-2026-114248)

CVE-2026-114248 is a vulnerability in the dhikshitha29 Insurance-Management-System's Plan Management Form component, specifically in the /Admin/includes/AddNewPlan-inc.php file. The vulnerability arises from improper authentication checks when processing the submit, Plan_no, and Name parameters, allowing an attacker to bypass authentication remotely. The vulnerability is classified under CWE-287 (Improper Authentication). The system uses a rolling release model, so no fixed or affected versions are explicitly identified. The vulnerability has been publicly disclosed, but the vendor has not yet issued a fix or official response.

The vulnerability allows remote attackers to bypass authentication controls by manipulating specific input parameters, potentially enabling unauthorized actions within the Plan Management Form. The CVSS score of 5.3 indicates a medium impact, with integrity affected but no confidentiality or availability impact reported. There is no evidence of active exploitation in the wild at this time.

No official fix or patch is currently available as the vendor has not responded to the issue report. Since the product uses a rolling release model, users should monitor the project repository or official channels for updates. Until a fix is provided, restricting access to the affected component and implementing additional authentication controls may help mitigate risk.