Is CVE-2026-11336 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-11336 being exploited in the wild.

How severe is CVE-2026-11336?

Medium severity, with a CVSS score of 6.3, published 5 June 2026.

Which products and versions are affected?

tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3.

Is there a fix for CVE-2026-11336?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-11336 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-11336?

Check whether you run Tittuvarghese College Management System. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-11336: tittuvarghese CollegeManagementSystem improper authorization in admin_page.php

CVE-2026-11336 · Severity: medium · CVSS 6.3 · Published 2026-06-05

A vulnerability in the CollegeManagementSystem software allows students or other low-privileged users to access the administrative dashboard. This system is used to manage engineering college operations, including student records and grades. An attacker with a valid student account can view administrative menus and potentially modify sensitive academic data or user accounts, leading to unauthorized changes in student records.

Technologies: Tittuvarghese College Management System. Vendors: Tittuvarghese.

Quick answers

Is CVE-2026-11336 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-11336 being exploited in the wild.
How severe is CVE-2026-11336?: Medium severity, with a CVSS score of 6.3, published 5 June 2026.
Which products and versions are affected?: tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3.
Is there a fix for CVE-2026-11336?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-11336 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-11336?: Check whether you run Tittuvarghese College Management System. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An improper authorization vulnerability exists in dashboard.php and dashboard_page/admin_page.php of the CollegeManagementSystem. The application fails to validate the user's role before including administrative components, relying solely on the presence of the $UserAuthData variable. A remote authenticated attacker (e.g., a student) can manipulate the UserAuthData argument or simply log in to gain access to the administrative interface. This allows unauthorized access to management functions such as user administration, course management, and data uploads. As of the advisory date, no patch has been released by the vendor.

Affected products

tittuvarghese CollegeManagementSystem 3e476335cfbfb9a049e09f474c7ec885f69a9df3

Timeline

2026-05-18: disclosed: Issue reported on GitHub by researcher
2026-06-05: advisory: NVD/VulDB advisory published

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.