CVE-2026-19064 is an authorization bypass vulnerability in SourceCodester Online Examination & Learning Management System 1.0. The flaw exists in the /view.php file, where an attacker can manipulate the ID parameter to bypass authorization controls. The vulnerability can be exploited remotely without user interaction and requires low privileges. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and limited confidentiality impact.

An attacker with low privileges can remotely manipulate the ID parameter in /view.php to bypass authorization controls, potentially gaining unauthorized access to restricted resources or information. The impact is limited to confidentiality with no integrity or availability impact reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected system and monitor for suspicious activity related to the /view.php endpoint and ID parameter manipulation.