What’s Vulnerable › Vulnerabilities

CVE-2026-2174: code-projects Contact Management System CRUD Endpoint improper authentication

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-02-08 · updated 2026-06-17
• Weakness: CWE-287

Description

A security flaw has been discovered in code-projects Contact Management System 1.0. This affects an unknown part of the component CRUD Endpoint. The manipulation of the argument ID results in improper authentication. The attack may be launched remotely.

Affected products

• code-projects Contact Management System: 1.0

References

• https://code-projects.org/
• https://vuldb.com/?ctiid.344875
• https://vuldb.com/?id.344875
• https://vuldb.com/?submit.749262

Get alerted when CVE-2026-2174 or the next vulnerability affects your stack