Is CVE-2026-9583 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-9583 being exploited in the wild.

How severe is CVE-2026-9583?

Medium severity, with a CVSS score of 4.3, published 26 May 2026.

Is there a fix for CVE-2026-9583?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-9583 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-9583?

Check whether you run SourceCodester CET Automated Grading System with AI Predictive Analytics at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-9583: SourceCodester CET Automated Grading System information disclosure in SQL Handler

CVE-2026-9583 · Severity: medium · CVSS 4.3 · Published 2026-05-26

The SourceCodester CET Automated Grading System, a web application for managing academic grades, contains a vulnerability that reveals sensitive technical information. By sending specifically crafted requests, an attacker can force the system to display detailed database error messages. This information could be used by a malicious actor to understand the internal structure of the database, potentially facilitating more advanced attacks against the organization's data.

Technologies: SourceCodester CET Automated Grading System with AI Predictive Analytics. Vendors: SourceCodester.

Quick answers

Is CVE-2026-9583 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-9583 being exploited in the wild.
How severe is CVE-2026-9583?: Medium severity, with a CVSS score of 4.3, published 26 May 2026.
Which products and versions are affected?: SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0.
Is there a fix for CVE-2026-9583?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-9583 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-9583?: Check whether you run SourceCodester CET Automated Grading System with AI Predictive Analytics at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

An information disclosure vulnerability exists in the SQL Handler component of SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0. The vulnerability is located in /index.php and can be triggered via the 'manage_subjects' action. By submitting oversized POST parameters (e.g., the 'program' field), a remote authenticated attacker can trigger database exceptions. The application fails to suppress these exceptions, returning verbose error messages that include SQLSTATE responses, PDO exceptions, and MariaDB/MySQL engine details. This exposure of backend architecture details assists in further reconnaissance and exploit development. A public exploit script is available.

Affected products

SourceCodester CET Automated Grading System with AI Predictive Analytics 1.0

Timeline

2026-05-26: disclosed: Initial disclosure and publication of PoC on GitHub
2026-05-26: advisory: CVE-2026-9583 published in NVD dataset

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.