Security Advisory

CVE-2026-7144

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-04-27 17:30:15

Last updated 2026-04-27 17:58:02

Assigner VulDB

CVSS score 5.3

State PUBLISHED

Description

A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file update_passwd_process.php. The manipulation of the argument temp_user results in authorization bypass. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

← Browse all CVEs View on cve.org ↗