Vulnerability · Published Aug 23, 2026 · Assigned by VulDB
CVE-2026-78144code-projects Barangay Resident Profiling Management System Boarder Management boarders.php authorization
Medium 6.3
In plain English
A medium-severity authorization bypass via user-controlled key in Barangay Resident Profiling Management System from code-projects. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).
Official description
A vulnerability was identified in code-projects Barangay Resident Profiling Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /boarders.php of the component Boarder Management Module. Such manipulation of the argument ID leads to authorization bypass. The attack can be executed remotely. The exploit is publicly available and might be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Barangay Resident Profiling Management System | 1.0 |
Weakness: CWE-639, CWE-285 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-394527 | code-projects Barangay Resident Profiling Management System Boarder Management boarders.php authorization vdb-entry, technical-description
- VDB-394527 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- CVE-2026-78144 | CVE Analysis and Report third-party-advisory
- Submit #882425 | code-projects Barangay Resident Profiling Management System (BRPMS) / Barangay San Fabian 1.0 Insecure Direct Object Reference (IDOR) third-party-advisory
- https://gist.github.com/c4ttr4ck/3601aa0ba9e567705823b6d425e84237 exploit
- https://code-projects.org/ product