What’s Vulnerable › Vulnerabilities

CVE-2026-6201: CodeAstro Online Job Portal Delete Job Posting job-delete.php access control

• Severity: medium (CVSS 5.4 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-04-13 · updated 2026-10-26
• Weakness: CWE-266

Description

A vulnerability was identified in CodeAstro Online Job Portal 1.0. The impacted element is an unknown function of the file /jobs/job-delete.php of the component Delete Job Posting Handler. Such manipulation of the argument ID leads to improper access controls. The attack can be launched remotely. The exploit is publicly available and might be used.

Affected products

• CodeAstro Online Job Portal: 1.0

References

• https://codeastro.com/
• https://github.com/Xmyronn/CodeAstro-Online-Job-Portal-IDOR.git
• https://vuldb.com/submit/797515
• https://vuldb.com/vuln/357123
• https://vuldb.com/vuln/357123/cti

Get alerted when CVE-2026-6201 or the next vulnerability affects your stack