CVE-2026-86214: Improper Authentication in Mstfakts College-Management-System

This vulnerability in Mstfakts College-Management-System affects an unspecified function in Front-end/login.php where manipulation of the email parameter leads to improper authentication. The flaw allows remote attackers to bypass authentication controls without privileges or user interaction. The product's rolling release model means no explicit versioning information is available for affected or patched releases. The vulnerability has a CVSS 4.0 base score of 6.9 (medium severity) with network attack vector, low complexity, no privileges required, no user interaction, and low to limited impact on confidentiality, integrity, and availability. The issue was reported early but the vendor has not yet issued a response or patch. Public exploit details exist but no active exploitation is known.

Successful exploitation allows remote attackers to bypass authentication mechanisms in the affected system, potentially granting unauthorized access. The impact on confidentiality, integrity, and availability is rated as low to limited. There are no reports of active exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or issued a fix, monitor official channels for updates. In the meantime, consider additional access controls or network-level restrictions to limit exposure to the vulnerable login functionality.