CVE-2026-95828

Name of the Vulnerable Software and Affected Versions Mstfakts College-Management-System (affected versions not specified)

Description A flaw in the Authentication component allows for remote session fixation. This occurs within the session start() function located in the Front-end/server.php file. Session fixation is a method where an attacker provides a valid session identifier to a user and then hijacks the session once the user authenticates.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the Front-end/server.php file or the session start() function until a patch is available.