Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

Munyweki

First CVE: Mar 3, 2024Active for: 2 yearsTotal CVEs: 22
19.4
VTI Score
Low

Munyweki maintains a narrow portfolio of business and educational management systems, including insurance administration and student result tracking platforms, that collectively attract moderate vulnerability disclosure activity despite their specialized deployment scope. The vendor's vulnerability profile centers on application-layer input-handling and access-control weaknesses: cross-site scripting, code injection, path traversal, and improper privilege assignment recur across its products and reflect the web-facing and data-access demands of management software. A meaningful share of these vulnerabilities reach serious severity, though the exposure remains concentrated within the vendor's focused customer base rather than broadly distributed. Defenders deploying these systems should prioritize web-application controls and access-management hardening; current severity, exploitation status, and exposure counts are shown alongside this summary.

FAUCET AI Generated
22
Total CVEs
More Total CVEs than 96% of tracked vendors
3.7
Avg CVEs / Product / Year
More Avg CVEs / Product / Year than 95% of tracked vendors
6.0
Avg CVSS Score
Higher Avg CVSS Score than 30% of tracked vendors
0.0%
In CISA KEV
Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact products developed by Munyweki over time

Volume of CVEsAvg CVSS Base Score
First CVE
Mar 3, 2024
2 years ago
Most Recent CVE
Feb 23, 2026
152 days ago

Products(2 total)

Top CVEs

Signals from CVEs in this vendor scope (22 CVEs).

22 CVEs · Highest risk first

CVEPublishedCVSSRiskKEVExploit
CVE-2026-2983CRITICAL
A vulnerability was determined in SourceCodester Student Result Management System 1.0. The impacted element is an unknown function of the file /admin/core/import_users.php of the c
Feb 23, 20269.831NONO
CVE-2026-2938HIGH
A vulnerability has been found in SourceCodester Student Result Management System 1.0. The affected element is an unknown function of the file /srms/script/admin/core/update_smtp.p
Feb 22, 20267.325NONO
CVE-2025-4912CRITICAL
A vulnerability has been found in SourceCodester Student Result Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the
May 19, 20259.125NONO
CVE-2026-2984MEDIUM
A vulnerability was identified in SourceCodester Student Result Management System 1.0. This affects an unknown function of the file /admin/core/drop_user.php. Such manipulation of
Feb 23, 20266.522NONO
CVE-2024-7080HIGH
A vulnerability was found in SourceCodester Insurance Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the
Jul 24, 20247.522NONO
CVE-2024-31064MEDIUM
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the First Name input field.
Mar 28, 20246.120NONO
CVE-2025-5723MEDIUM
A vulnerability was found in SourceCodester Student Result Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /script/acade
Jun 6, 20254.819NONO
CVE-2025-4898MEDIUM
A vulnerability was found in SourceCodester Student Result Management System 1.0. It has been declared as critical. This vulnerability affects the function unlink of the file updat
May 18, 20255.418NONO
CVE-2024-31648MEDIUM
Cross Site Scripting (XSS) in Insurance Management System v1.0, allows remote attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Category Na
Apr 15, 20246.118NONO
CVE-2024-31063MEDIUM
Cross Site Scripting vulnerability in Insurance Mangement System v.1.0.0 and before allows a remote attacker to execute arbitrary code via the Email input field.
Mar 28, 20246.418NONO
View all 22 CVEs →

CVE Severity & Scoring

Severity distribution of CVEs that affect this vendor's products22 CVEs
82%
9%
9%
Severity distribution among all CVEs352,708 CVEs
45%
40%
11%
MediumHighCritical
Attack Vector
Local0 (0.0%)
Network22 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low22 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None9 (40.9%)
Unknown0 (0.0%)
Required13 (59.1%)
Privileges Required
Low5 (22.7%)
High4 (18.2%)
None13 (59.1%)
Unknown0 (0.0%)

Exploit Exposure

Signals from CVEs in this vendor scope (22 CVEs).

CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%

Social Chatter

An overview of all social media posts that mention a CVE ID that affects a product developed by Munyweki.

Media Mentions

Media articles that mention a CVE ID that affects a product developed by Munyweki — matched by CVE ID, not by vendor name.

Top CNAs Publishing CVEs For Munyweki's Products

View all 2 CNAs →

Top CWEs