Vulnerability · Published Feb 8, 2026 · Assigned by VulDB
CVE-2026-2174code-projects Contact Management System CRUD Endpoint improper authentication
High 7.3
In plain English
A high-severity improper authentication in Contact Management System from code-projects. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 50% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.6%top 49.9% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A security flaw has been discovered in code-projects Contact Management System 1.0. This affects an unknown part of the component CRUD Endpoint. The manipulation of the argument ID results in improper authentication. The attack may be launched remotely.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Contact Management System | 1.0 |
Weakness: CWE-287 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:X/RL:X/RC:X
References
- VDB-344875 | code-projects Contact Management System CRUD Endpoint improper authentication vdb-entry, technical-description
- VDB-344875 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #749262 | code-projects Contact Management System in PHP unknown Authentication Bypass Issues third-party-advisory
- https://code-projects.org/ product