---METADATA---
VENDOR: Kubernetes
PRODUCT: ingress-nginx
AFFECTED_VERSIONS: See vendor advisory for affected versions
---END_METADATA---

Description Summary:
A security issue has been discovered in ingress-nginx involving the 'nginx' configuration handling. This vulnerability could lead to unauthorized access or configuration bypass.

Executive Summary:
The ingress-nginx controller contains a high-severity security flaw that may allow attackers to bypass intended ingress rules and gain unauthorized access to backend services.

Vulnerability Details

CVE-ID: CVE-2026-1580

Affected Software: ingress-nginx

Affected Versions: See vendor advisory for affected versions

Vulnerability: This vulnerability pertains to how ingress-nginx processes specific configuration directives. An attacker could potentially craft requests that exploit these configuration weaknesses to bypass security controls or access internal resources they are not authorized to reach.

Business Impact

A compromise of the ingress controller can expose all backend microservices to unauthorized traffic. This could lead to data breaches, service disruption, and a total breakdown of the Kubernetes cluster's perimeter security. The CVSS score of 8.8 reflects the high potential for widespread impact.

Remediation Plan

Immediate Action: Upgrade the ingress-nginx controller to the latest patched version recommended by the Kubernetes maintainers.

Proactive Monitoring: Review Nginx access and error logs for unusual request patterns that might indicate an attempt to bypass ingress rules.

Compensating Controls: Implement Network Policies within the Kubernetes cluster to provide defense-in-depth, ensuring that even if the ingress is bypassed, backend services are restricted.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 5, 2026, there is no public information indicating active exploitation. Ingress controllers are critical infrastructure components, and vulnerabilities in them are high-priority targets for sophisticated attackers.

Analyst Recommendation

Maintaining the security of the ingress layer is vital for the overall health of a Kubernetes environment. Organizations must apply the necessary updates to ingress-nginx immediately to ensure the integrity of their service boundaries.

---METADATA---
VENDOR: PX4
PRODUCT: MAVLink
AFFECTED_VERSIONS: MAVLink 2.0 without message signing enabled
---END_METADATA---

Description Summary:
The MAVLink protocol used in PX4 systems lacks default cryptographic authentication. Unauthenticated attackers can send SERIAL_CONTROL messages to gain interactive shell access to the drone or vehicle.

Executive Summary:
Unauthenticated attackers with access to the MAVLink interface can gain full interactive shell access to PX4-powered vehicles, potentially leading to complete loss of physical and digital control.

Vulnerability Details

CVE-ID: CVE-2026-1579

Affected Software: PX4 MAVLink

Affected Versions: MAVLink 2.0 (when signing is disabled)

Vulnerability: MAVLink 2.0 does not require cryptographic authentication by default. An unauthenticated party can inject MAVLink messages, including the SERIAL_CONTROL message, which provides a direct interactive shell. This allows for unauthorized control of the vehicle's onboard computer.

Business Impact

The impact is extreme, involving the potential for physical destruction of the vehicle, theft of the asset, or use of the vehicle for malicious purposes. In a commercial or defense context, this represents a total failure of mission security and safety. The CVSS score of 9.8 reflects the critical risk to both data and physical safety.

Remediation Plan

Immediate Action: Enable MAVLink 2.0 message signing immediately on all PX4 systems to enforce cryptographic authentication for all communications.

Proactive Monitoring: Monitor MAVLink traffic for unexpected SERIAL_CONTROL messages or unauthorized heartbeat signals from unknown system IDs.

Compensating Controls: Secure the communication channel (e.g., radio link or network) using external encryption (VPN or encrypted telemetry) to prevent unauthorized access to the MAVLink interface.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of March 31, 2026, there is no public information indicating active exploitation. However, the lack of authentication in drone protocols is a well-known security weakness frequently explored by researchers.

Analyst Recommendation

Cryptographic signing is not optional for safe vehicle operation. Administrators and operators must ensure that MAVLink 2.0 signing is properly configured with secure keys. Failure to do so leaves the vehicle open to hijacking by anyone capable of transmitting on the same frequency or network.

---METADATA---
VENDOR: Rapid7
PRODUCT: InsightVM
AFFECTED_VERSIONS: Versions before 8.34.0
---END_METADATA---

Description Summary:
Rapid7 InsightVM versions before 8.34.0 contain a signature verification flaw in the ACS endpoint. This allows unauthenticated attackers to bypass authentication and achieve full account takeover.

Executive Summary:
A critical authentication bypass vulnerability in Rapid7 InsightVM allows unauthenticated attackers to hijack Security Console accounts and gain full administrative control over the environment.

Vulnerability Details

CVE-ID: CVE-2026-1568

Affected Software: Rapid7 InsightVM

Affected Versions: Versions prior to 8.34.0

Vulnerability: This vulnerability stems from a failure to verify signatures on the Assertion Consumer Service (ACS) cloud endpoint. An unauthenticated remote attacker can submit unsigned assertions to the endpoint, which the application processes to issue valid session cookies for targeted user accounts.

Business Impact

The potential consequences of this flaw are severe, as it enables a complete compromise of the InsightVM Security Console. Successful exploitation allows an attacker to gain full account takeover, providing access to sensitive vulnerability data, asset configurations, and security reporting. With a CVSS score of 9.6, this represents a Critical risk to organizational data integrity and confidentiality.

Remediation Plan

Immediate Action: Administrators must upgrade Rapid7 InsightVM to version 8.34.0 or later immediately to patch the signature verification logic.

Proactive Monitoring: Security teams should review access logs for the ACS endpoint for any anomalous session generation or unrecognized login events originating from external IP addresses.

Compensating Controls: Ensure the Security Console is not exposed to the public internet and restrict access to the web interface via a VPN or trusted management network.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Feb 3, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the critical nature of the flaw and the ease of bypassing authentication, the potential for exploitation is extremely high.

Analyst Recommendation

This vulnerability represents a significant threat to the security posture of any organization utilizing Rapid7 InsightVM. The ability for an unauthenticated attacker to bypass authentication mechanisms and take over administrative accounts is a worst-case scenario. It is strongly recommended that the patch to version 8.34.0 be applied within 24 hours to mitigate the risk of exploitation.

---METADATA---
VENDOR: WebStack
PRODUCT: WebStack Theme for WordPress
AFFECTED_VERSIONS: Up to and including 1.2024
CONFIDENCE: high
MISSING: patch, exploit_status
---END_METADATA---

Description Summary:
The WebStack WordPress theme contains an arbitrary file upload vulnerability in the io_img_upload() function, allowing unauthenticated attackers to execute remote code.

Executive Summary:
An unauthenticated arbitrary file upload vulnerability in the WebStack WordPress theme allows remote attackers to achieve full site compromise via malicious code execution.

Vulnerability Details

CVE-ID: CVE-2026-1555

Affected Software: WebStack WordPress Theme

Affected Versions: Up to and including 1.2024

Vulnerability: The io_img_upload() function lacks necessary file type validation, enabling an unauthenticated attacker to upload arbitrary files to the server. This flaw facilitates Remote Code Execution (RCE) by allowing the upload and subsequent execution of malicious scripts.

Business Impact

With a CVSS score of 9.8, this vulnerability is critical as it allows complete site takeover without authentication. Successful exploitation can lead to data exfiltration, defacement, and the deployment of persistent backdoors or ransomware within the web server environment.

Remediation Plan

Immediate Action: Update the WebStack theme to the latest version available; if no patch is available, disable the theme immediately.

Proactive Monitoring: Audit the server's uploads directory for unauthorized or anomalous file types and review web server logs for suspicious POST requests.

Compensating Controls: Deploy a Web Application Firewall (WAF) with rules configured to block unauthorized file uploads and restrict access to the upload directory.

Exploitation Status

Public Exploit Available: Unknown

Analyst Notes: As of Apr 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, the nature of the flaw makes it a prime target for automated exploitation tools.

Analyst Recommendation

Immediate remediation is required to prevent total site compromise. Administrators should verify the integrity of their WordPress installations and ensure that directory permissions prevent the execution of scripts in upload folders.

Executive Summary:
A high-severity vulnerability has been identified in the foreman_kubevirt plugin, affecting multiple products from the vendor "flaw". This flaw could allow a remote attacker to compromise the virtualization management platform, potentially leading to unauthorized access, modification, or disruption of virtualized infrastructure. Organizations are urged to apply vendor patches immediately to mitigate the significant risk of system compromise.

Vulnerability Details

CVE-ID: CVE-2026-1531

Affected Software: flaw Multiple Products

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability exists within the foreman_kubevirt plugin, which integrates Foreman with Kubevirt for managing virtual machines on a Kubernetes cluster. The flaw likely stems from improper input validation in the API endpoints responsible for creating or managing Kubevirt compute resources. A remote attacker with authenticated, but potentially low-privileged, access to the Foreman interface could send a specially crafted API request to execute arbitrary commands on the underlying Foreman server or within the context of the Kubernetes cluster, leading to a full compromise of the managed environment.

Business Impact

This vulnerability is rated as High severity with a CVSS score of 8.1. Successful exploitation could result in a significant breach of the organization's virtualization infrastructure. An attacker could gain control over the Foreman instance, allowing them to create, delete, or modify virtual machines, access sensitive data stored on these systems, and disrupt critical business operations. The compromised system could also be used as a pivot point to launch further attacks against the internal network, posing a high risk to data confidentiality, integrity, and availability.

Remediation Plan

Immediate Action: The primary remediation is to apply the security updates provided by the vendor across all affected systems immediately. Prioritize patching for internet-facing or critical infrastructure management servers. Following patching, review access and audit logs for any signs of compromise that may have occurred prior to remediation.

Proactive Monitoring: Implement enhanced monitoring on Foreman application and web server logs. Look for unusual or malformed API requests targeting foreman_kubevirt endpoints. Monitor for unexpected processes spawning from the Foreman application user on the host system and for anomalous network connections originating from the Foreman server to the Kubernetes cluster.

Compensating Controls: If immediate patching is not feasible, implement compensating controls to reduce the risk. Restrict network access to the Foreman management interface to a limited set of trusted administrative IP addresses. If a Web Application Firewall (WAF) is in use, deploy virtual patching rules to inspect and block malicious requests targeting the vulnerable plugin components.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 2, 2026, there are no known public exploits or reports of this vulnerability being actively exploited in the wild. However, due to the high severity score and the critical nature of the systems it affects, it is anticipated that threat actors will actively work to develop exploits. Organizations should assume a heightened state of risk.

Analyst Recommendation

Given the high CVSS score of 8.1, this vulnerability presents a significant and immediate risk to the security of your virtualization management infrastructure. We strongly recommend that organizations prioritize the deployment of the vendor-supplied security patches to all affected systems without delay. Although this CVE is not currently listed on the CISA KEV catalog, its severity makes it a prime candidate for future inclusion and a valuable target for attackers. Proactive patching is the most effective strategy to prevent potential exploitation and safeguard critical assets.

Executive Summary:
A high-severity vulnerability, identified as CVE-2026-1530 with a CVSS score of 8.1, has been discovered in the fog-kubevirt component used by multiple products from the vendor "flaw". Successful exploitation could allow an attacker to execute arbitrary code within the virtualization environment, potentially leading to a complete compromise of the affected host systems and the virtual machines they manage. Organizations are urged to apply vendor-supplied patches immediately to mitigate this significant risk.

Vulnerability Details

CVE-ID: CVE-2026-1530

Affected Software: flaw Multiple Products

Affected Versions: See vendor advisory for specific affected versions

Vulnerability: The vulnerability exists within the fog-kubevirt library, which is used to manage KubeVirt virtual machines. The flaw is due to insufficient input sanitization when processing API requests for virtual machine creation or modification. An attacker with the ability to send a specially crafted request to an application utilizing this library can inject malicious commands into the parameters of the request. These commands are subsequently executed with the privileges of the management service on the underlying Kubernetes cluster node, leading to remote code execution.

Business Impact

This vulnerability is rated as High severity with a CVSS score of 8.1. Exploitation could have a severe impact on business operations, leading to a complete compromise of the organization's virtualization infrastructure. Potential consequences include the theft of sensitive data from virtual machines, deployment of ransomware, disruption of critical services through a denial-of-service attack, and unauthorized access to the broader corporate network. A successful attack would result in significant financial loss, reputational damage, and potential regulatory penalties.

Remediation Plan

Immediate Action:

• Identify all systems and applications using the vulnerable fog-kubevirt component.
• Apply the security updates provided by the vendor to all affected assets immediately, following established patch management procedures.
• Prioritize patching for internet-facing or mission-critical systems.

Proactive Monitoring:

• Review Kubernetes API server logs and application logs for unusual or malformed requests related to VM management.
• Monitor for unexpected processes or outbound network connections originating from Kubernetes nodes or management pods.
• Implement and review alerts for anomalous VM creation, deletion, or modification activities.

Compensating Controls:

• If immediate patching is not feasible, restrict network access to the management interfaces of applications using the vulnerable library.
• Implement a Web Application Firewall (WAF) with rules designed to block command injection patterns in API requests targeting the vulnerable component.
• Ensure the service account running the application has the minimum required privileges to limit the blast radius of a potential compromise.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of February 2, 2026, there are no known public exploits available for this vulnerability. However, due to the high severity and the straightforward nature of command injection flaws, it is highly probable that threat actors will develop exploit code. This vulnerability is not currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.

Analyst Recommendation

Given the high CVSS score of 8.1 and the risk of complete system compromise, this vulnerability presents a critical threat to the organization. We strongly recommend that all affected systems are patched on an emergency basis. While this CVE is not yet on the CISA KEV list, its severity warrants immediate attention. If patching is delayed for any reason, the compensating controls outlined above must be implemented without delay to reduce the attack surface and mitigate the immediate risk of exploitation.

---METADATA---
VENDOR: WP Duplicate
PRODUCT: WP Duplicate Plugin
AFFECTED_VERSIONS: Up to and including 1.1.8
---END_METADATA---

Description Summary:
The WP Duplicate plugin for WordPress allows authenticated subscribers to trigger a chain of vulnerabilities leading to unauthenticated remote code execution via arbitrary file upload.

Executive Summary:
A critical vulnerability chain in the WP Duplicate plugin allows authenticated users to bypass security checks, enabling unauthenticated attackers to upload malicious files and execute code remotely.

Vulnerability Details

CVE-ID: CVE-2026-1499

Affected Software: WP Duplicate Plugin (WordPress)

Affected Versions: Up to and including 1.1.8

Vulnerability: This is a multi-stage flaw involving missing authorization on the process_add_site() AJAX action and path traversal. A subscriber-level attacker can set an internal key, which an unauthenticated attacker can subsequently use to bypass checks in the handle_upload_single_big_file() function, resulting in arbitrary file upload and remote code execution (RCE).

Business Impact

The impact is severe, as it allows low-privileged users to facilitate a full server compromise by unauthenticated external actors. This can lead to website defacement, data exfiltration, or the use of the server as a pivot point for further internal network attacks. The CVSS score of 9.8 is justified by the ease of moving from low-level access to full RCE.

Remediation Plan

Immediate Action: Deactivate and remove the WP Duplicate plugin immediately until a version higher than 1.1.8 is available and verified to contain the fix.

Proactive Monitoring: Review WordPress AJAX logs and check the /wp-content/uploads/ directory for suspicious PHP files or unexpected directory structures.

Compensating Controls: Implement a WAF to block unauthorized AJAX calls and restrict file upload types at the web server level.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Feb 6, 2026, there is no public information indicating active exploitation. Plugin vulnerabilities involving RCE are frequently exploited by automated botnets shortly after disclosure.

Analyst Recommendation

The complexity of this vulnerability chain does not diminish its risk; rather, it highlights a fundamental failure in the plugin's authorization logic. Organizations running WordPress should immediately update or remove this plugin. Given the potential for unauthenticated RCE, this is a critical priority for any web-facing WordPress installation.

---METADATA---
VENDOR: RegistrationMagic
PRODUCT: User Registration & Membership (WordPress Plugin)
AFFECTED_VERSIONS: Up to, and including, 5.1.2
---END_METADATA---

Description Summary:
The RegistrationMagic WordPress plugin allows unauthenticated attackers to create administrator accounts by exploiting improper privilege management during the membership registration process.

Executive Summary:
A critical privilege management flaw in the RegistrationMagic WordPress plugin allows unauthenticated attackers to register new accounts with full administrative privileges.

Vulnerability Details

CVE-ID: CVE-2026-1492

Affected Software: User Registration & Membership – Custom Registration Form Builder (RegistrationMagic)

Affected Versions: Up to, and including, 5.1.2

Vulnerability: The plugin fails to enforce a server-side allowlist for user roles during registration. This allows an unauthenticated attacker to supply a "role" parameter (e.g., 'administrator') during the registration process, which the plugin accepts and applies to the new account.

Business Impact

This vulnerability results in a total site takeover by allowing any visitor to create an admin account. With a CVSS score of 9.8, the impact is severe, as it bypasses all standard security controls and grants the attacker full access to the WordPress dashboard and underlying data.

Remediation Plan

Immediate Action: Update the RegistrationMagic plugin to the latest version (above 5.1.2) immediately. Verify that the registration settings do not allow role selection by the user.

Proactive Monitoring: Review the WordPress user list for any unauthorized accounts with the 'Administrator' role created recently.

Compensating Controls: Disable public user registration if it is not required for business operations, or implement a manual approval process for all new registrations.

Exploitation Status

Public Exploit Available: No

Analyst Notes: As of Mar 3, 2026, there is no public information indicating active exploitation. This type of vulnerability is easily exploitable via automated scripts, making rapid remediation essential.

Analyst Recommendation

The ability for unauthenticated users to grant themselves administrative rights is a critical security failure. Immediate patching is mandatory to protect the integrity of the WordPress site and the privacy of its users.

---METADATA---
VENDOR: CleanTalk
PRODUCT: Spam protection, Anti-Spam, FireWall plugin
AFFECTED_VERSIONS: All versions up to, and including, 6.71
---END_METADATA---

Description Summary:
The CleanTalk Anti-Spam plugin for WordPress allows unauthenticated attackers to install arbitrary plugins via PTR record spoofing, potentially leading to remote code execution.

Executive Summary:
A critical vulnerability in the CleanTalk Anti-Spam WordPress plugin allows unauthenticated attackers to bypass authorization and install arbitrary plugins, potentially leading to full site takeover via remote code execution.

Vulnerability Details

CVE-ID: CVE-2026-1490

Affected Software: CleanTalk Spam protection, Anti-Spam, FireWall

Affected Versions: All versions up to, and including, 6.71

Vulnerability: This vulnerability involves an authorization bypass in the checkWithoutToken function. By spoofing reverse DNS (PTR) records, an unauthenticated attacker can trick the plugin into allowing unauthorized arbitrary plugin installation and activation, particularly on sites with invalid API keys.

Business Impact

A successful exploit could lead to complete compromise of the WordPress environment. By installing and activating additional vulnerable plugins, attackers can achieve remote code execution (RCE), resulting in data theft, site defacement, and total loss of administrative control. The CVSS score of 9.8 reflects the critical nature of this unauthenticated entry point and the potential for total system impact.

Remediation Plan

Immediate Action: Update the CleanTalk Anti-Spam plugin to the latest available version (6.72 or higher) immediately to patch the vulnerable function.

Proactive Monitoring: Review WordPress audit logs for any unauthorized plugin installations or activations and verify the validity of your CleanTalk API keys.

Compensating Controls: Implement a Web Application Firewall (WAF) to filter suspicious traffic and restrict unauthorized administrative actions at the network edge.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of Feb 15, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the critical CVSS score and the ability for unauthenticated attackers to trigger RCE, the potential for exploitation is extremely high.

Analyst Recommendation

This vulnerability represents a severe risk to WordPress integrity. Organizations must prioritize the update of the CleanTalk plugin to the latest version immediately. Failure to remediate this flaw could allow an external actor to gain full administrative access and execute malicious code without any prior credentials.

---METADATA---
VENDOR: PROG MIS
PRODUCT: Prog Management System
AFFECTED_VERSIONS: PROG MIS Prog Management System: all
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
The PROG Management System contains a SQL injection vulnerability that allows unauthenticated remote attackers to execute arbitrary SQL commands and access database contents.

Executive Summary:
A critical SQL injection vulnerability in the PROG Management System enables unauthenticated attackers to exfiltrate sensitive data from the underlying database.

Vulnerability Details

CVE-ID: CVE-2026-14809

Affected Software: PROG MIS Prog Management System

Affected Versions: PROG MIS Prog Management System: all

Vulnerability: This is a classic CWE-89 SQL injection vulnerability. It allows an unauthenticated remote attacker to inject malicious SQL queries into the application, bypassing authentication and data access controls to retrieve unauthorized information.

Business Impact

With a CVSS score of 7.5 (High), this vulnerability poses a severe risk to data confidentiality. Successful exploitation could lead to full database compromise, resulting in the unauthorized disclosure of sensitive business or user information, potentially leading to regulatory non-compliance and significant reputational damage.

Remediation Plan

Immediate Action: Contact the vendor (PROG MIS) immediately to obtain the necessary security patch or remediation guidance as specified at https://www.twcert.org.tw/tw/cp-132-11025-fa1d9-1.html.

Proactive Monitoring: Review database access logs for anomalous query patterns, such as unexpected use of SQL keywords or high volumes of data retrieval requests.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection protection rules to filter malicious traffic directed at the application.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of July 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, the lack of authentication required to exploit this flaw makes it a high-priority target for threat actors.

Analyst Recommendation

This vulnerability is critical due to the ease of access for unauthenticated attackers. Organizations using this system must take immediate steps to isolate the application from public access until a vendor-supplied patch is successfully applied and verified.

---METADATA---
VENDOR: PROG MIS
PRODUCT: Prog Management System
AFFECTED_VERSIONS: All
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The PROG MIS Prog Management System contains an information exposure vulnerability that allows unauthenticated remote attackers to view sensitive database credentials via a specific application page.

Executive Summary:
A critical information exposure vulnerability in the PROG MIS Prog Management System enables unauthenticated remote attackers to obtain sensitive database account information.

Vulnerability Details

CVE-ID: CVE-2026-14808

Affected Software: PROG MIS Prog Management System

Affected Versions: All

Vulnerability: This vulnerability involves the Exposure of Sensitive Information to an unauthorized control sphere (CWE-497). An unauthenticated attacker can access a specific, unprotected page within the application to retrieve hard-coded database account names and passwords.

Business Impact

The exposure of database credentials allows an attacker to gain direct, unauthorized access to the backend data store. With a CVSS score of 9.8, this vulnerability presents a critical threat, enabling the exfiltration of sensitive business data, modification of records, or total administrative takeover of the database infrastructure.

Remediation Plan

Immediate Action: Contact the vendor immediately to secure the affected page and remove the exposure of sensitive configuration details.

Proactive Monitoring: Monitor database audit logs for unauthorized logins or unusual query patterns that deviate from standard application behavior.

Compensating Controls: Deploy a WAF to restrict public access to the specific application page identified as the entry point for this information leakage.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jul 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This vulnerability provides an easy path for attackers to gain credentials necessary for deeper network intrusion. Administrators should treat this as a high-priority incident and coordinate with the vendor to ensure the vulnerability is mitigated immediately.

---METADATA---
VENDOR: PROG MIS
PRODUCT: ERP App
AFFECTED_VERSIONS: All
CONFIDENCE: high
MISSING: none
---END_METADATA---

Description Summary:
The PROG MIS ERP App contains a hard-coded credentials vulnerability, allowing unauthenticated remote attackers to access application code and compromise database accounts.

Executive Summary:
A critical hard-coded credential vulnerability in the PROG MIS ERP App allows unauthenticated remote attackers to gain full access to sensitive database information and application code.

Vulnerability Details

CVE-ID: CVE-2026-14807

Affected Software: PROG MIS ERP App

Affected Versions: All

Vulnerability: This vulnerability is categorized as a Use of Hard-coded Credentials (CWE-798). It permits an unauthenticated remote attacker to bypass authentication mechanisms entirely, facilitating unauthorized access to the application’s underlying code and database credentials.

Business Impact

Successful exploitation of this vulnerability results in complete loss of confidentiality and integrity regarding the application and its connected database. Given the CVSS score of 9.8, this represents a critical risk that could lead to full system compromise, unauthorized data exfiltration of business-sensitive information, and long-term reputational damage.

Remediation Plan

Immediate Action: Contact the vendor immediately to obtain and apply the necessary security patches or configuration updates to remove hard-coded credentials.

Proactive Monitoring: Review database and application access logs for any anomalous connection attempts or unauthorized queries originating from unknown IP addresses.

Compensating Controls: Implement a Web Application Firewall (WAF) to filter malicious traffic and restrict access to sensitive endpoints until the application can be formally patched.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of Jul 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The presence of hard-coded credentials constitutes a severe security failure. Organizations using the PROG MIS ERP App must prioritize this issue and engage the vendor immediately for remediation. Failure to address this vulnerability poses an unacceptable risk of total system compromise.

---METADATA---
VENDOR: React
PRODUCT: create-react-app
AFFECTED_VERSIONS: react create-react-app: up to 5
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A command injection vulnerability in React create-react-app (up to version 5) allows remote attackers to execute arbitrary OS commands.

Executive Summary:
A vulnerability in React create-react-app allows for OS command injection, potentially leading to unauthorized system access and execution of arbitrary code.

Vulnerability Details

CVE-ID: CVE-2026-14802

Affected Software: React create-react-app

Affected Versions: react create-react-app: up to 5

Vulnerability: The software is vulnerable to CWE-78 (OS Command Injection) and CWE-77 (Command Injection). This allows an attacker to inject and execute system-level commands, potentially gaining control over the environment where the software is being utilized.

Business Impact

The vulnerability is rated with a CVSS score of 7.3 (High). Successful exploitation could lead to a complete compromise of the build environment or developer workstation, potentially allowing for supply chain attacks, data exfiltration, or lateral movement within the corporate network.

Remediation Plan

Immediate Action: Apply vendor security updates immediately. Users should check for the latest versions of create-react-app and migrate away from vulnerable versions up to 5.

Proactive Monitoring: Monitor build pipelines and development environments for unexpected process executions or unusual modifications to system configurations.

Compensating Controls: Ensure that build environments are isolated and run with the principle of least privilege to minimize the potential impact of command execution.

Exploitation Status

Public Exploit Available: False

Analyst Notes: As of July 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, the nature of command injection flaws necessitates prompt remediation to prevent potential supply chain compromise.

Analyst Recommendation

Given the risk to development and build environments, it is critical to update your dependencies and ensure that create-react-app is not running in an insecure state. Prioritize this update to maintain the integrity of your software development lifecycle.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Onlne Examination & Learning Management System
AFFECTED_VERSIONS: SourceCodester Onlne Examination & Learning Management System 1.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
An improper authorization vulnerability in the SourceCodester Onlne Examination & Learning Management System allows unauthenticated attackers to manipulate enrollment data via ajax_enroll.php.

Executive Summary:
A critical authorization bypass vulnerability in the SourceCodester Onlne Examination & Learning Management System exposes student enrollment data to unauthorized manipulation.

Vulnerability Details

CVE-ID: CVE-2026-14778

Affected Software: SourceCodester Onlne Examination & Learning Management System

Affected Versions: SourceCodester Onlne Examination & Learning Management System 1.0

Vulnerability: The vulnerability exists within the /ajax_enroll.php file, where improper authorization allows an unauthenticated attacker to manipulate student_id, schedule_id, or action arguments. This flaw permits unauthorized modification of enrollment records within the system.

Business Impact

Successful exploitation of this vulnerability could lead to unauthorized access to sensitive academic records and the corruption of enrollment data. With a CVSS score of 7.3, this high-severity flaw poses a significant risk to data integrity and administrative control, potentially resulting in operational disruption and loss of trust in the learning management platform.

Remediation Plan

Immediate Action: Contact the vendor immediately for security patches. If no patch is available, restrict access to the /ajax_enroll.php file to authorized internal networks only.

Proactive Monitoring: Review web server access logs for anomalous requests targeting /ajax_enroll.php or unusual patterns in student_id and schedule_id parameters.

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to inspect and block requests containing suspicious input within the specified arguments of the enrollment module.

Exploitation Status

Public Exploit Available: True

Analyst Notes: As of July 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, because a public exploit is available, the barrier to entry for attackers is low, and the potential for exploitation is high.

Analyst Recommendation

Given the availability of public exploit code and the ease of access for unauthenticated attackers, organizations utilizing this software must prioritize remediation. Until a formal vendor patch is applied, strict access controls and WAF filtering should be implemented to mitigate the risk of unauthorized data manipulation.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Class and Exam Timetabling System
AFFECTED_VERSIONS: SourceCodester Class and Exam Timetabling System 1.0/1.php
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A SQL injection vulnerability in SourceCodester Class and Exam Timetabling System allows unauthenticated attackers to execute malicious database queries via the ID argument in edit_course1.php.

Executive Summary:
An unauthenticated SQL injection vulnerability in the SourceCodester Class and Exam Timetabling System threatens the integrity and confidentiality of the underlying database.

Vulnerability Details

CVE-ID: CVE-2026-14772

Affected Software: SourceCodester Class and Exam Timetabling System

Affected Versions: SourceCodester Class and Exam Timetabling System 1.0/1.php

Vulnerability: The vulnerability originates in the /edit_course1.php file, where the system fails to properly sanitize the ID argument. This allows an unauthenticated attacker to inject malicious SQL commands, enabling unauthorized interaction with the backend database.

Business Impact

The potential for SQL injection represents a high risk, carrying a CVSS score of 7.3. Successful exploitation could lead to unauthorized data exfiltration, modification of course information, or complete compromise of the database, causing significant operational downtime and damage to the integrity of academic scheduling data.

Remediation Plan

Immediate Action: Seek guidance from the vendor regarding a security update. In the absence of a patch, implement strict input validation on all parameters handled by the /edit_course1.php script.

Proactive Monitoring: Monitor database logs for unusual query patterns, such as unexpected syntax errors or attempts to dump database tables.

Compensating Controls: Utilize a Web Application Firewall (WAF) to detect and block common SQL injection patterns targeting the application's URL parameters.

Exploitation Status

Public Exploit Available: True

Analyst Notes: As of July 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, the existence of a public exploit significantly increases the risk, making remediation a high priority.

Analyst Recommendation

Organizations must treat this SQL injection vulnerability with high urgency. Given the potential for full database compromise, administrators should apply any available vendor patches immediately and restrict public access to the vulnerable script until a secure version is deployed.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Class and Exam Timetabling System
AFFECTED_VERSIONS: SourceCodester Class and Exam Timetabling System 1.0/1.php
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A SQL injection vulnerability in SourceCodester Class and Exam Timetabling System allows unauthenticated attackers to execute malicious database queries via the ID argument in edit_exam1.php.

Executive Summary:
An unauthenticated SQL injection vulnerability in the SourceCodester Class and Exam Timetabling System exposes the application's database to unauthorized query execution.

Vulnerability Details

CVE-ID: CVE-2026-14771

Affected Software: SourceCodester Class and Exam Timetabling System

Affected Versions: SourceCodester Class and Exam Timetabling System 1.0/1.php

Vulnerability: This vulnerability resides in the /edit_exam1.php file, where the ID argument is insufficiently sanitized. An unauthenticated attacker can leverage this weakness to inject arbitrary SQL queries, directly impacting the backend database.

Business Impact

With a CVSS score of 7.3, this vulnerability presents a substantial risk to the confidentiality and integrity of exam timetabling systems. Exploitation can lead to unauthorized access to sensitive exam data, potential data loss, or unauthorized changes to scheduling, leading to significant reputational and operational impact.

Remediation Plan

Immediate Action: Contact the vendor for a patch to address the SQL injection flaw. If no update is available, restrict access to the /edit_exam1.php file via network-level controls.

Proactive Monitoring: Review server logs for anomalous traffic and database logs for signs of SQL injection attempts or unauthorized query execution.

Compensating Controls: Deploy a Web Application Firewall (WAF) configured to inspect and filter malicious SQL syntax from incoming HTTP requests.

Exploitation Status

Public Exploit Available: True

Analyst Notes: As of July 6, 2026, there is no public information indicating active exploitation of this vulnerability. Despite this, the availability of a public exploit necessitates prompt action to protect the system from potential compromise.

Analyst Recommendation

SQL injection is a severe risk that requires immediate attention. Administrators are urged to monitor for suspicious activity and apply any vendor-supplied patches as soon as they become available to eliminate this vector of attack.

---METADATA---
VENDOR: SourceCodester
PRODUCT: Class and Exam Timetabling System
AFFECTED_VERSIONS: 1.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A SQL injection vulnerability exists in SourceCodester Class and Exam Timetabling System 1.0, allowing unauthenticated remote attackers to execute arbitrary SQL commands via the /edit_room.php file.

Executive Summary:
A critical SQL injection vulnerability in SourceCodester Class and Exam Timetabling System 1.0 enables unauthenticated remote attackers to compromise the underlying database.

Vulnerability Details

CVE-ID: CVE-2026-14770

Affected Software: SourceCodester Class and Exam Timetabling System

Affected Versions: 1.0

Vulnerability: The application is susceptible to SQL injection through the ID argument in the /edit_room.php file. This vulnerability is remotely exploitable by an unauthenticated attacker, requiring no prior system access or user interaction.

Business Impact

Successful exploitation of this vulnerability poses a severe risk to data integrity and confidentiality. Attackers can manipulate database queries to unauthorizedly access, modify, or delete sensitive information stored within the system. With a CVSS score of 7.3, this flaw represents a significant security gap that could lead to full database compromise and potential service disruption.

Remediation Plan

Immediate Action: Since no official patch is currently available, administrators should restrict network access to the affected script or disable the vulnerable component until a fix is released.

Proactive Monitoring: Review web server access logs for suspicious requests targeting /edit_room.php, specifically looking for SQL syntax patterns (e.g., UNION, SELECT, or comment characters).

Compensating Controls: Deploy a Web Application Firewall (WAF) rule to inspect and block incoming requests containing SQL injection payloads directed at the /edit_room.php endpoint.

Exploitation Status

Public Exploit Available: True

Analyst Notes: As of July 6, 2026, a public exploit is available for this vulnerability. Given the ease of exploitation and the lack of an official patch, organizations should prioritize isolating the affected system immediately.

Analyst Recommendation

The presence of a public exploit for an unauthenticated SQL injection vulnerability makes this a high-priority risk. Given the absence of a vendor-provided patch, immediate network-level isolation or the implementation of strict WAF rules is necessary to prevent exploitation.

---METADATA---
VENDOR: code-projects
PRODUCT: Real State Services
AFFECTED_VERSIONS: 1.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A SQL injection vulnerability in code-projects Real State Services 1.0 allows remote, unauthenticated attackers to execute arbitrary SQL commands via the Bankname argument in /pay.php.

Executive Summary:
An unauthenticated SQL injection vulnerability in code-projects Real State Services 1.0 permits remote attackers to manipulate database queries and potentially access sensitive data.

Vulnerability Details

CVE-ID: CVE-2026-14769

Affected Software: code-projects Real State Services

Affected Versions: 1.0

Vulnerability: The /pay.php file fails to properly sanitize the Bankname parameter, allowing an unauthenticated attacker to inject malicious SQL commands. This provides a direct vector for unauthorized database interaction without requiring user authentication.

Business Impact

This vulnerability carries a CVSS score of 7.3, indicating a high risk of unauthorized data access and potential database manipulation. Exploitation could lead to the exposure of customer or financial information, resulting in significant reputational damage and potential regulatory non-compliance for the organization managing the service.

Remediation Plan

Immediate Action: Identify and restrict access to the vulnerable /pay.php file until the vendor provides a security update.

Proactive Monitoring: Monitor application logs for anomalous database activity or attempts to submit malformed input via the Bankname field.

Compensating Controls: Utilize a Web Application Firewall (WAF) to filter and block input containing SQL injection patterns directed at the /pay.php file.

Exploitation Status

Public Exploit Available: True

Analyst Notes: As of July 6, 2026, public exploit code exists for this vulnerability. Organizations using this software should treat the risk as elevated and implement immediate protective measures to prevent unauthorized database access.

Analyst Recommendation

The combination of unauthenticated access and public exploit availability necessitates immediate action. Organizations must apply compensating controls such as WAF filtering or access restrictions to mitigate this high-risk vulnerability until a vendor patch is issued.

---METADATA---
VENDOR: code-projects
PRODUCT: Real State Services
AFFECTED_VERSIONS: 1.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A critical SQL injection vulnerability in code-projects Real State Services 1.0 allows unauthenticated remote attackers to execute arbitrary SQL commands via the 'loc' parameter in /builderHome.php.

Executive Summary:
An unauthenticated SQL injection vulnerability in code-projects Real State Services 1.0 allows attackers to execute arbitrary SQL commands, risking total database compromise.

Vulnerability Details

CVE-ID: CVE-2026-14768

Affected Software: code-projects Real State Services

Affected Versions: 1.0

Vulnerability: The application contains a flaw in /builderHome.php where the 'loc' parameter is not properly sanitized, facilitating SQL injection. This allows an unauthenticated attacker to inject and execute arbitrary SQL commands, compromising the database layer.

Business Impact

With a CVSS score of 7.3, this vulnerability represents a significant risk to the integrity and confidentiality of the organization's data. Successful exploitation could allow attackers to bypass security controls, extract sensitive information, or disrupt service availability, potentially leading to severe business consequences.

Remediation Plan

Immediate Action: Restrict access to the /builderHome.php script immediately and seek guidance from the vendor regarding a security patch.

Proactive Monitoring: Review web server traffic and database logs for unusual query patterns or attempts to manipulate the 'loc' parameter in web requests.

Compensating Controls: Implement WAF rules specifically designed to detect and block SQL injection strings targeting the 'loc' parameter within the /builderHome.php file.

Exploitation Status

Public Exploit Available: True

Analyst Notes: As of July 6, 2026, public exploit information is available. The ease of exploitation via simple parameter manipulation makes this a critical issue that requires immediate defensive action.

Analyst Recommendation

The presence of a public exploit for this unauthenticated SQL injection vulnerability requires urgent attention. Organizations should implement defensive measures, such as WAF filtering, and restrict access to the affected script until the vendor releases a permanent fix.

---METADATA---
VENDOR: Code-Projects
PRODUCT: Hotel and Tourism Reservation
AFFECTED_VERSIONS: Code-Projects Hotel and Tourism Reservation 1.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A SQL injection vulnerability in the add_event.php file of Code-Projects Hotel and Tourism Reservation 1.0 allows for remote, unauthenticated database manipulation.

Executive Summary:
A critical SQL injection vulnerability in Code-Projects Hotel and Tourism Reservation 1.0 allows unauthenticated remote attackers to manipulate the backend database, potentially leading to full data compromise.

Vulnerability Details

CVE-ID: CVE-2026-14764

Affected Software: Code-Projects Hotel and Tourism Reservation

Affected Versions: Code-Projects Hotel and Tourism Reservation 1.0

Vulnerability: This is a SQL injection flaw (CWE-89) located in the add_event.php file. The application fails to properly sanitize user-supplied input, allowing an unauthenticated attacker to inject malicious SQL commands directly into the database.

Business Impact

With a CVSS score of 7.3, this vulnerability poses a severe risk to the confidentiality and integrity of the application's data. Successful exploitation could allow an attacker to dump sensitive reservation information, modify administrative records, or potentially gain unauthorized access to the underlying server environment, resulting in significant reputational and financial damage.

Remediation Plan

Immediate Action: Given the lack of a specific patch, immediately restrict access to the add_event.php file or the entire application until a secure version is released or the code is manually sanitized.

Proactive Monitoring: Review web server access logs for unusual patterns, such as SQL keywords or URL-encoded characters in request parameters, which may indicate active exploitation attempts.

Compensating Controls: Deploy a Web Application Firewall (WAF) with strict SQL injection protection rules to block malicious input patterns targeting the application.

Exploitation Status

Public Exploit Available: True

Analyst Notes: As of July 7, 2026, there is a public exploit available for this vulnerability. Because the exploit is publicly disclosed, the risk of active exploitation is elevated and immediate action is required.

Analyst Recommendation

This vulnerability is highly dangerous due to the lack of authentication requirements and the availability of public exploit code. If this software is currently in use, it should be considered compromised until verified otherwise; isolate the application from the network until remediation is fully implemented.

---METADATA---
VENDOR: code-projects
PRODUCT: Hotel and Tourism Reservation
AFFECTED_VERSIONS: 1.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A SQL injection vulnerability exists in the Hotel and Tourism Reservation system, allowing unauthenticated remote attackers to manipulate the database via the 'tour' parameter in tour_reserves.php.

Executive Summary:
An unauthenticated SQL injection vulnerability in code-projects Hotel and Tourism Reservation 1.0 poses a significant risk of unauthorized database access and data manipulation.

Vulnerability Details

CVE-ID: CVE-2026-14763

Affected Software: code-projects Hotel and Tourism Reservation

Affected Versions: 1.0

Vulnerability: This is a SQL injection (CWE-89) vulnerability located in the /admin/tour_reserves.php file. The flaw allows unauthenticated remote attackers to inject malicious SQL commands via the 'tour' parameter, bypassing existing security controls.

Business Impact

Successful exploitation of this vulnerability can lead to unauthorized access to the backend database, potentially resulting in the compromise of sensitive reservation records and personal user information. Given the CVSS score of 7.3, this flaw represents a high-severity risk to business operations, specifically regarding data confidentiality and integrity. The ability for unauthenticated actors to interact directly with the database could also lead to significant reputational damage and regulatory non-compliance.

Remediation Plan

Immediate Action: As no official patch is currently available, restrict network access to the /admin/ directory and implement strict input validation on the 'tour' parameter to neutralize the SQL injection vector.

Proactive Monitoring: Monitor web server logs for anomalous HTTP requests targeting the tour_reserves.php file, specifically looking for SQL syntax patterns or unexpected character sequences in the 'tour' parameter.

Compensating Controls: Deploy a Web Application Firewall (WAF) with updated rulesets designed to detect and block common SQL injection payloads before they reach the application layer.

Exploitation Status

Public Exploit Available: true

Analyst Notes: As of July 6, 2026, while public exploit code is available for this vulnerability, there is no confirmed evidence of widespread exploitation in the wild. However, the availability of proof-of-concept code increases the likelihood of targeted attacks, necessitating immediate defensive measures.

Analyst Recommendation

Due to the high severity of this SQL injection vulnerability and the confirmed availability of public exploit code, organizations using the affected version of the Hotel and Tourism Reservation software must act immediately. Prioritize implementing the suggested compensating controls and strictly limit access to administrative interfaces until a formal vendor patch is released.

---METADATA---
VENDOR: code-projects
PRODUCT: Hotel and Tourism Reservation
AFFECTED_VERSIONS: 1.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A SQL injection vulnerability exists in the rooms.php component of code-projects Hotel and Tourism Reservation 1.0, allowing unauthenticated remote attackers to compromise database integrity.

Executive Summary:
An unauthenticated SQL injection vulnerability in code-projects Hotel and Tourism Reservation 1.0 poses a significant risk of unauthorized database access and data manipulation.

Vulnerability Details

CVE-ID: CVE-2026-14762

Affected Software: code-projects Hotel and Tourism Reservation

Affected Versions: 1.0

Vulnerability: This vulnerability is a SQL injection (CWE-89) flaw located in the rooms.php file. It allows an unauthenticated attacker to inject malicious SQL commands into the application's database, potentially bypassing existing security controls.

Business Impact

Successful exploitation of this vulnerability could lead to unauthorized access to sensitive reservation data, loss of confidentiality, and potential modification of system records. Given the CVSS score of 7.3, this is classified as a High-severity issue that could result in significant operational disruption and data breach risks if not addressed promptly.

Remediation Plan

Immediate Action: Since a specific patch is currently unknown, administrators should restrict public access to the affected application and disable the vulnerable rooms.php functionality if not required.

Proactive Monitoring: Monitor server access logs for suspicious SQL syntax patterns, such as UNION SELECT statements or unexpected characters in URL parameters.

Compensating Controls: Implement a Web Application Firewall (WAF) with strict SQL injection filtering rules to inspect and block malicious incoming requests targeting the application.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

This SQL injection vulnerability represents a critical risk to the integrity of the application database. Organizations using version 1.0 of this software must prioritize the implementation of WAF protections immediately and monitor vendor channels for the release of an official security patch.

---METADATA---
VENDOR: code-projects
PRODUCT: Hotel and Tourism Reservation
AFFECTED_VERSIONS: 1.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A SQL injection vulnerability in the add_tour.php script of code-projects Hotel and Tourism Reservation 1.0 permits unauthenticated attackers to perform unauthorized database operations.

Executive Summary:
An unauthenticated SQL injection vulnerability in code-projects Hotel and Tourism Reservation 1.0 creates a high risk of unauthorized database interaction and information disclosure.

Vulnerability Details

CVE-ID: CVE-2026-14756

Affected Software: code-projects Hotel and Tourism Reservation

Affected Versions: 1.0

Vulnerability: This is a SQL injection (CWE-89) vulnerability residing in the add_tour.php file. By failing to properly sanitize user-supplied input, the application allows an unauthenticated attacker to execute malicious SQL statements.

Business Impact

The ability for an unauthenticated user to inject SQL commands poses a severe threat to data integrity and confidentiality. Given the CVSS score of 7.3, this vulnerability could be leveraged to compromise the entire reservation system, leading to significant reputational and financial consequences.

Remediation Plan

Immediate Action: Restrict access to the add_tour.php script to authorized personnel only, and monitor the application for any signs of unauthorized configuration changes.

Proactive Monitoring: Regularly audit database transaction logs for anomalous activity or unexpected modifications to tour-related data tables.

Compensating Controls: Utilize a Web Application Firewall to intercept and sanitize malicious traffic before it reaches the add_tour.php script, effectively neutralizing the injection vector.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high-severity rating, immediate action is required to harden the application against this SQL injection risk. Security teams should implement the aforementioned compensating controls and maintain a state of heightened vigilance until a permanent patch is released by the vendor.

---METADATA---
VENDOR: code-projects
PRODUCT: Hotel and Tourism Reservation
AFFECTED_VERSIONS: 1.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A SQL injection vulnerability exists in the add_event.php file of code-projects Hotel and Tourism Reservation 1.0, enabling unauthenticated remote attackers to execute arbitrary SQL queries.

Executive Summary:
An unauthenticated SQL injection vulnerability in code-projects Hotel and Tourism Reservation 1.0 exposes the underlying database to unauthorized manipulation and potential data exfiltration.

Vulnerability Details

CVE-ID: CVE-2026-14755

Affected Software: code-projects Hotel and Tourism Reservation

Affected Versions: 1.0

Vulnerability: The application is susceptible to SQL injection (CWE-89) within the add_event.php script. An unauthenticated attacker can supply crafted input to this parameter, resulting in the execution of unauthorized database commands.

Business Impact

Exploitation of this vulnerability allows an attacker to interact directly with the application database, potentially leading to the theft of reservation records or administrative credentials. With a CVSS score of 7.3, the vulnerability presents a high risk to business operations, necessitating immediate defensive measures to prevent unauthorized data access.

Remediation Plan

Immediate Action: As no patch is currently available, restrict network access to the add_event.php endpoint to authorized internal users only.

Proactive Monitoring: Review database logs for unusual query activity or errors originating from the add_event.php script that suggest injection attempts.

Compensating Controls: Deploy WAF rules specifically designed to detect and block SQL injection payloads targeting input parameters used in the event management module.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

The presence of a high-severity SQL injection vulnerability requires immediate attention to protect the application backend. Administrators should apply perimeter security measures immediately to mitigate the risk until an official vendor update is provided.

---METADATA---
VENDOR: code-projects
PRODUCT: Hotel and Tourism Reservation
AFFECTED_VERSIONS: 1.0
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A SQL injection vulnerability in the code-projects Hotel and Tourism Reservation system allows unauthenticated attackers to execute arbitrary database queries.

Executive Summary:
A critical SQL injection vulnerability in the code-projects Hotel and Tourism Reservation system enables unauthenticated attackers to compromise sensitive backend database information.

Vulnerability Details

CVE-ID: CVE-2026-14754

Affected Software: code-projects Hotel and Tourism Reservation

Affected Versions: 1.0

Vulnerability: The application fails to properly sanitize user-supplied input before using it in database queries (CWE-89, CWE-74), facilitating SQL injection attacks that can be performed by unauthenticated users.

Business Impact

A successful SQL injection attack can lead to total compromise of the database, including the theft of sensitive customer information or credentials. Given the 7.3 CVSS score, this vulnerability represents a high risk to business operations, as it may result in data breaches and non-compliance with data protection regulations.

Remediation Plan

Immediate Action: Audit the source code for vulnerable input fields and apply parameterized queries to neutralize the SQL injection vector.

Proactive Monitoring: Monitor database query logs for suspicious syntax, such as UNION SELECT statements or unauthorized access attempts to sensitive tables.

Compensating Controls: Deploy a Web Application Firewall (WAF) configured with SQL injection protection rules to filter malicious input before it reaches the application.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

SQL injection remains a primary vector for data exfiltration; therefore, addressing this flaw is critical. Organizations using version 1.0 should restrict access to the application immediately and prioritize the implementation of input validation and parameterized queries.

---METADATA---
VENDOR: mjperpinosa
PRODUCT: stumasy
AFFECTED_VERSIONS: up to commit 327d1b0f2915ba79d7ef8ebb74553e987609d9be
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A critical authorization bypass vulnerability exists in the mjperpinosa stumasy application, allowing unauthorized actors to potentially circumvent security controls.

Executive Summary:
An authorization bypass vulnerability in the mjperpinosa stumasy application poses a significant security risk by allowing unauthorized access to restricted system functions.

Vulnerability Details

CVE-ID: CVE-2026-14753

Affected Software: mjperpinosa stumasy

Affected Versions: up to commit 327d1b0f2915ba79d7ef8ebb74553e987609d9be

Vulnerability: The application is susceptible to an authorization bypass (CWE-639, CWE-285), which allows unauthenticated attackers to perform actions that should be restricted to authorized users.

Business Impact

The ability for an unauthenticated user to bypass authorization controls threatens the integrity and confidentiality of the application. With a CVSS score of 7.3, this high-severity flaw could lead to unauthorized data modification or administrative control over the system, potentially resulting in significant operational disruption and data exposure.

Remediation Plan

Immediate Action: Verify if a patch or updated commit has been released by the developer and apply it immediately; if no patch exists, restrict network access to the application.

Proactive Monitoring: Review application access logs for unusual patterns, such as unauthorized attempts to access administrative endpoints or functions by non-privileged accounts.

Compensating Controls: Implement a Web Application Firewall (WAF) to detect and block suspicious requests targeting authorization-related parameters or endpoints.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Given the high CVSS score and the nature of authorization bypass vulnerabilities, administrators should prioritize securing the stumasy installation. If a direct patch is unavailable from the vendor, consider isolating the instance from public-facing networks until a secure version is verified.

---METADATA---
VENDOR: mjperpinosa
PRODUCT: stumasy
AFFECTED_VERSIONS: up to commit 327d1b0f2915ba79d7ef8ebb74553e987609d9be
CONFIDENCE: high
MISSING: patch
---END_METADATA---

Description Summary:
A SQL injection vulnerability in mjperpinosa stumasy allows unauthenticated attackers to execute malicious database queries via improper input handling.

Executive Summary:
A critical SQL injection vulnerability in the mjperpinosa stumasy application poses a high risk by allowing unauthenticated attackers to manipulate backend database operations.

Vulnerability Details

CVE-ID: CVE-2026-14750

Affected Software: mjperpinosa stumasy

Affected Versions: up to commit 327d1b0f2915ba79d7ef8ebb74553e987609d9be

Vulnerability: The application contains a SQL injection flaw (CWE-89, CWE-74) where unauthenticated user input is incorrectly handled, allowing for unauthorized interaction with the database.

Business Impact

This vulnerability could allow an attacker to read, modify, or delete data within the application's database. With a CVSS score of 7.3, the impact is severe, potentially leading to unauthorized data access and the compromise of system integrity, which can cause significant reputational and operational damage.

Remediation Plan

Immediate Action: Check for available updates or commits that address SQL injection flaws in the codebase and apply them immediately.

Proactive Monitoring: Monitor database logs for anomalies and unexpected query structures that deviate from normal application behavior.

Compensating Controls: Utilize a Web Application Firewall (WAF) to inspect incoming traffic for common SQL injection patterns and block requests that match known malicious signatures.

Exploitation Status

Public Exploit Available: false

Analyst Notes: As of July 6, 2026, there is no public information indicating active exploitation of this vulnerability. However, due to the nature of the flaw, the potential for exploitation is high.

Analyst Recommendation

Immediate remediation is required to prevent potential database compromise. If an official patch is not provided, developers must manually sanitize all database inputs using parameterized queries to effectively mitigate this high-risk vulnerability.