CVE-2026-19345

MediumCVSS 6.5

Published: 09/08/2026(UTC)Updated: 14/08/2026(UTC)Translated: 09/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.52%

42th percentile - higher than 42% of all known CVEs

Summary

A missing authorization vulnerability exists in code-projects Task Management System 1.0 in /user/UpdateTaskStatus.php. Manipulating task_id/val arguments leads to missing authorization. The attack can be launched remotely. The exploit is public.

Risk Assessment

An attacker can change task statuses without proper permissions, potentially leading to data integrity issues in the system.

Recommendation

Apply patches or update the system. Implement proper access control mechanisms.

Original NVD description (English source)

A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of the argument task_id/val results in missing authorization. It is possible to launch the attack remotely. The exploit has been made public and could be used.