Skip to content
Threat Feed
Subscribe
high advisory

SourceCodester Smart Attendance System: Authentication bypass in api/attendance_handler.php (CVE-2026-125076)

An authentication bypass vulnerability exists in the SourceCodester Smart Attendance System with QR Code Scanner 1.0, allowing remote unauthenticated manipulation of the student_code argument via the JSON endpoint.

CVE search metadata

CVE search record: CVE-2026-125076. Severity: high. CVSS: 7.3. KEV: no. Product: Smart Attendance System with QR Code Scanner (1.0). Brief: SourceCodester Smart Attendance System: Authentication bypass in api/attendance_handler.php (CVE-2026-125076). Brief link: https://feed.craftedsignal.io/briefs/2026-11-smart-attendance-auth-bypass/

Triage facts

Revision 1
Applicability
Smart Attendance System with QR Code Scanner (1.0)
Evidence
Unknown
Severity
High
Action
Elevated
Sources
1 public source
Freshness
Revision 1Nov 10, 02:02 UTC
Detection
1 rule
Vulnerabilities
1 CVE
Source quality
A1Likely

CVE-2026-125076 impacts the SourceCodester Smart Attendance System with QR Code Scanner 1.0. The vulnerability resides in the api/attendance_handler.php file, specifically within the JSON endpoint. An attacker can exploit this by manipulating the student_code argument to bypass authentication. Exploitation is possible remotely and public proof-of-concept exploit material is available.

Impact

Successful exploitation allows for remote authentication bypass, potentially granting unauthorized access to the attendance system data.

Recommendation

  • Inventory instances of SourceCodester Smart Attendance System with QR Code Scanner 1.0.
  • Prioritize decommissioning or restricting network access to the affected web directory (api/attendance_handler.php) until a vendor patch is applied.
  • Implement a Web Application Firewall (WAF) rule to block or monitor requests to api/attendance_handler.php where the student_code parameter contains suspicious values.

Immediate actions

Identify all instances of SourceCodester Smart Attendance System with QR Code Scanner 1.0.

IT Operations 24h

Threat Hunt

Hunt for anomalous HTTP GET/POST requests targeting the api/attendance_handler.php file.

T1190 high medium confidence hunt now

Data: Web server access logs

Mitigations

Implement WAF rules to restrict access to /api/attendance_handler.php

immediate IT Operations

CVE-2026-125076

Detection coverage 1

Detect CVE-2026-125076 Exploitation - Authentication Bypass Attempt

high

Detects requests to the vulnerable attendance_handler.php endpoint that attempt to manipulate the student_code parameter.

sigma tactics: initial_access techniques: T1190 sources: webserver

Detection queries are available on the platform. Get full rules →