CVE Feed

    Dashboard / CVE / CVE-2026-7144

    CVE-2026-7144

    A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file update_passwd_process.php. The manipulation of the argument temp_user results in authorization bypass. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

    Published:Apr 27, 2026
    Last Modified:Apr 28, 2026
    EPS:Apr 27, 2026
    EPSS Score:
    CVSS Score:4.3

    Affected Products

    Vendor
    1000projects
    Product
    Portfolio Management System Mca

    Exploits

    No exploit reference

    Related CVEs

    CVE-2026-7143 (CVSS 2.1) — A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unk…
    CVE-2024-13003 (CVSS 5.3) — A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been rated as critical.…
    CVE-2024-12965 (CVSS 6.9) — A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0. It has been declared as critic…
    CVE-2024-12961 (CVSS 6.9) — A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA …
    CVE-2024-12960 (CVSS 6.9) — A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System…
    CVE-2024-12958 (CVSS 6.9) — A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Th…
    CVE-2024-12956 (CVSS 5.3) — A vulnerability was found in 1000 Projects Portfolio Management System MCA 1.0 and classified as critical. Thi…
    CVE-2024-12954 (CVSS 5.3) — A vulnerability, which was classified as critical, was found in 1000 Projects Portfolio Management System MCA …
    CVE-2024-12953 (CVSS 5.3) — A vulnerability, which was classified as critical, has been found in 1000 Projects Portfolio Management System…
    CVE-2024-12951 (CVSS 5.3) — A vulnerability classified as critical has been found in 1000 Projects Portfolio Management System MCA 1.0. Af…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High