CVE-2026-14808
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk40th percentile - higher than 40% of all known CVEs
Summary
The Prog Management System by PROG MIS has an Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to view a specific page and obtain the database account and password.
Risk Assessment
The risk involves potential unauthorized access to the database, leading to data leakage, modification, or deletion, and enabling further attacks on the system.
Recommendation
Immediately restrict access to the vulnerable page by implementing authentication, change default database credentials, and consider deploying access monitoring mechanisms.
Original NVD description (English source)
Prog Management System developed by PROG MIS has a Exposure of Sensitive Information vulnerability, allowing unauthenticated remote attackers to view a specific page and obtain the database account and password.