Veille CVE

Jeudi 20 août 2026

2 CVE

  1. CVE-2026-77020 7.3 Élevée

    CodeAstro Apartment Visitor Management System

    A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. Affected by this vulnerability is an unknown functionality of the file password-recovery.php. The manipulation of the argument email leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used.

  2. CVE-2026-77019 7.3 Élevée

    CodeAstro Apartment Visitor Management System

    A vulnerability was determined in CodeAstro Apartment Visitor Management System 1.0. Affected is an unknown function of the file /apartment-visitor/forgotpw.php. Executing a manipulation of the argument secode can lead to sql injection. The attack may be launched remotely. The exploit has been publicly disclosed and may be utilized.