CVE-2026-10243

HighCVSS 7.3

Published: 01/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 23/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.63%

46th percentile - higher than 46% of all known CVEs

Summary

Smart Parking System 1.0 by code-projects has a vulnerability in admin endpoints allowing remote access without authentication. Exploit details are publicly available.

Risk Assessment

An unauthorized attacker can remotely access administrative functions, potentially leading to full system compromise.

Recommendation

Immediately implement authentication on all admin endpoints and apply the vendor's patch.

Other vulnerabilities in Smart Parking System

CVE-2026-14735High
A SQL injection vulnerability has been found in Smart Parking System 1.0 in the file /parkings/parkings.php. An unknown function allows manipulation of the street/city/status arguments, enabling remote SQL injection. The exploit has been publicly disclosed.

Original NVD description (English source)

A security vulnerability has been detected in code-projects Smart Parking System 1.0. Affected is an unknown function of the component Admin Endpoint. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Multiple endpoints are affected.