Is CVE-2026-19839 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-19839?

CVE-2026-19839 has a CVSS v3 severity of MEDIUM (4.7).

Back

CVE-2026-19839

Description

A vulnerability was detected in SourceCodester Simple Doctors Appointment System 1.0. This issue affects the function save_doctor of the file /save_file.php. The manipulation results in unrestricted upload. The attack can be executed remotely. The exploit is now public and may be used.