CVE-2026-105179
LOWDescription
A weakness has been identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the file Admin/add_user.php of the component Password Handler. Executing a manipulation of the argument Password can lead to missing encryption of sensitive data. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks.
Is your site exposed to CVE-2026-105179?
Run a free security scan — no signup, results in seconds.
CVSS v3.1 Score
EPSS — Exploit Prediction
EPSS estimates the probability that this vulnerability will be exploited in the wild within the next 30 days. A higher score means more likely to be exploited.
Weakness Type (CWE)
References
Frequently Asked Questions
What is CVE-2026-105179? +
How severe is CVE-2026-105179? +
How do I check if I'm vulnerable to CVE-2026-105179? +
Related Vulnerabilities
Cryptographic issue when a controller receives an LMP start encryption command under unexpected conditions.
Windows Cryptographic Services Security Feature Bypass Vulnerability
Cryptographic issue in Automotive while unwrapping the key secs2d and verifying with RPMB data.
Cryptographic issue while performing RSA PKCS padding decoding.
Cryptographic issue while processing crypto API calls, missing checks may lead to corrupted key usage or IV reuses.
An insecure password scheme refers to vulnerabilities arising from improper selection of encryption algorithms, inadequate key management, or flawed code …