CVE-2026-10624 is a vulnerability in SourceCodester Human Resource Management 1.0 affecting the /detailview.php file within the Employee View Page component. The vulnerability arises from improper control of resource identifiers due to manipulation of the employeeid parameter. This allows an attacker to potentially access or manipulate resources improperly. The vulnerability is remotely exploitable without requiring user interaction and has a CVSS 4.0 base score of 5.3, indicating medium severity. There is no vendor-provided patch or official remediation level documented at this time. The exploit has been publicly disclosed, but no known active exploitation has been confirmed.

The vulnerability allows remote attackers to manipulate the employeeid parameter in the Employee View Page, potentially leading to unauthorized access or control over resource identifiers. This could result in exposure or modification of employee-related data. The impact is rated medium severity with a CVSS score of 5.3. No evidence of active exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is documented, users should monitor vendor communications for updates. Until a patch is available, consider restricting access to the affected component or implementing additional input validation controls where possible.