CVE-2026-14807
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk37th percentile - higher than 37% of all known CVEs
Summary
The ERP application developed by PROG MIS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to view application code and obtain the database account and password.
Risk Assessment
The risk involves unauthorized access to sensitive business data and source code, potentially leading to data breaches, intellectual property theft, and further attacks on the organization's IT infrastructure.
Recommendation
Immediately change all hard-coded credentials in the ERP application, implement multi-factor authentication, and conduct a security audit of the source code.
Original NVD description (English source)
ERP App developed by PROG MIS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to view application code and obtain the database account and password.