CyberRota
Back to database

CVE-2026-7144

MEDIUM · CVSS 4.3 EPSS 0.03% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-04-27 · Last synced: 2026-05-27

CyberRota Analysis

Uzaktan istismar edilebilir olabilir.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Detected Signals
exploit
GitHub PoC Links

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-7144
Severity
MEDIUM
CVSS
4.3
EPSS
0.03%

Original NVD Description

A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file update_passwd_process.php. The manipulation of the argument temp_user results in authorization bypass. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.