CVE-2026-14640

CVE-2026-14640CVE-2026-14640

Description

A vulnerability was found in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /index.php of the component Login. Performing a manipulation of the argument Username results in sql injection. Remote exploitation of the attack is possible. The exploit has been made public and could be used.

Scoring

CVSS 7.3 ()
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Last modified2026-07-04
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.