Medium severity · published Aug 23, 2026
CVE-2026-78144
code-projects Barangay Resident Profiling Management System Boarder Management boarders.php authorization
6.3
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to authorization bypass. The attack can be executed remotely. The exploit is publicly available and might be used.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
Low
Integrity
Low
Availability
Low
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 32% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BR
Barangay Resident Profiling Management System · code-projects
1.0 · source: vendor
Affected product
BR
Barangay Resident Profiling Management System
code-projects
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-78144
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-78144
code-projects.org
https://code-projects.org/
gist.github.com
https://gist.github.com/c4ttr4ck/3601aa0ba9e567705823b6d425e84237
vuldb.com
https://vuldb.com/cve/CVE-2026-78144
vuldb.com
https://vuldb.com/submit/882425
vuldb.com
https://vuldb.com/vuln/394527
vuldb.com
https://vuldb.com/vuln/394527/cti
More from Barangay Resident Profiling Management System
7.3
CVE-2026-78143
code-projects Barangay Resident Profiling Management System Resident Search Functionality residents.php sql injection
6.3
CVE-2026-78142
code-projects Barangay Resident Profiling Management System Restore/Delete archived_records.php authorization