The vulnerability CVE-2026-5531 affects SourceCodester Student Result Management System 1.0 and involves cleartext storage of sensitive data in the file /login_credentials.txt. This occurs through an HTTP GET request handler component, allowing remote attackers to potentially access sensitive credentials stored without encryption. The CVSS 4.0 vector indicates network attack vector, low complexity, no privileges or user interaction required, and low impact on confidentiality. No official fix or patch has been published by the vendor as of the current information.

The vulnerability allows remote attackers to access sensitive login credentials stored in cleartext on disk, potentially compromising user accounts or system access. The impact is rated medium severity with a CVSS score of 6.9, reflecting the risk of credential exposure but limited by the low confidentiality impact and no reported exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the affected file and monitor for unauthorized access attempts. Avoid exposing the system to untrusted networks if possible.