<?xml version="1.0" encoding="utf-8"?>
<feed xmlns="http://www.w3.org/2005/Atom" xml:lang="en">
  <title>Mikołaj Kołodziej — CVE disclosures</title>
  <subtitle>Bilingual CV of Mikołaj Kołodziej (Wrocław): Cybersecurity student (CBE) seeking a penetration testing internship, with SOC as a secondary focus. Vulnerability research, coordinated disclosure, networking and reporting.</subtitle>
  <link rel="self" type="application/atom+xml" href="https://mikolajkolodziej.com/disclosures/feed.xml"/>
  <link rel="alternate" type="text/html" href="https://mikolajkolodziej.com/disclosures/"/>
  <id>https://mikolajkolodziej.com/disclosures/feed.xml</id>
  <updated>2026-10-21T00:00:00Z</updated>
  <author>
    <name>Mikołaj Kołodziej</name>
    <email>kolodziej.mikolaj06@gmail.com</email>
  </author>
  <rights>© 2026 Mikołaj Kołodziej</rights>
  <generator uri="https://github.com/mkolodziej1503/CV">Astro</generator>
  <entry>
    <title>Authentication bypass in admin account creation (/admin/functions/new_admin.php)</title>
    <link rel="alternate" type="text/html" href="https://mikolajkolodziej.com/disclosures/cve-2026-30764/"/>
    <id>https://mikolajkolodziej.com/disclosures/cve-2026-30764/</id>
    <updated>2026-10-21T00:00:00Z</updated>
    <published>2026-10-21T00:00:00Z</published>
    <summary type="text">Obed Nyakundi Rental House Management System 1.0 contains an authentication bypass vulnerability in /admin/functions/new_admin.php. The application processes user creation requests without validating administrative sessions or credentials. This allows a remote attacker to gain full administrative access by creating a new account. A CVE identifier has been reserved with MITRE and is pending a public reference record.</summary>
    <category term="critical"/>
    <category term="CWE-306"/>
    <category term="disclosed"/>
    <category term="CVE-2026-30764"/>
  </entry>
</feed>
