Online Voting System CVE-2026-86162

No special conditions are required. The vulnerable endpoint /ajax.php?action=login is the public login page of the application - accessible to any unauthenticated remote user by design. The CVSS 4.0 vector (PR:N/AC:L/AT:N/UI:N) confirms exploitation requires no credentials, no elevated network position, and no user interaction. Exploitation is limited by the niche deployment footprint of the product (primarily student/demo projects) and the absence of this application from typical enterprise inventories. Any internet-exposed or LAN-accessible installation of SourceCodester Online Voting System 1.0 is directly exploitable.

The CVSS 4.0 vector (AV:N/AC:L/AT:N/PR:N/UI:N) confirms network-exploitable, zero-prerequisite access - no authentication, no user interaction, no special configuration required. The E:P supplemental metric acknowledges the public exploit code on GitHub, meaningfully compressing the time-to-exploit for even low-skilled attackers. The base impact scores (VC:L/VI:L/VA:L) are conservative for a login-endpoint SQLi: in practice, authentication bypass via always-true injection clauses or UNION-based data extraction can yield full database access, which the CVSS 4.0 low impact scores likely understate. No CISA KEV listing was found, and no EPSS score was provided in the input data, so widespread active exploitation cannot be confirmed - but the public PoC means even a mid-sized municipal IT team in legnica should treat this as urgent if running this software. The primary limiting factor on broader impact is the obscurity and niche deployment footprint of SourceCodester projects, which are predominantly student-facing or demo environments rather than production civic infrastructure.

An attacker sends an HTTP POST request to /ajax.php?action=login with a crafted Username value such as ' OR '1'='1' -- , bypassing the authentication check and gaining access to the voting administration panel without valid credentials. With UNION-based injection, the attacker can enumerate database tables and extract all registered voter records, credentials, and ballots. A public PoC on GitHub (https://github.com/Aurora-Song/cve/issues/1) demonstrates this technique, making replication trivial.