CVE-2026-2174

A security flaw has been discovered in code-projects Contact Management System 1.0. This affects an unknown part of the component CRUD Endpoint. The manipulation of the argument ID results in improper authentication. The attack may be launched remotely.

Score

CVSS 3.1 9.8 Critical

Status

Analyzed - cna@vuldb.com

Published

2026-02-08

Last modified

2026-02-23

Weaknesses

CWE-287

Affected products

• Contact Management System (Code-projects)
• Contact Management System (Fabian)

References

• https://code-projects.org/
• https://vuldb.com/?ctiid.344875
• https://vuldb.com/?id.344875
• https://vuldb.com/?submit.749262