CVE-2026-14689mediumCWE-74CWE-89

CVE-2026-14689: medium-severity vulnerability in CodeAstro Apartment Visitor Management System

CodeAstro Apartment Visitor Management System add-apartment.php sql injection

Published · Updated

Follow this CVE+ Monitor Apartment Visitor Management System

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 5.3epss 0.3%
A security flaw has been discovered in CodeAstro Apartment Visitor Management System 1.0. The impacted element is an unknown function of the file /apartment-visitor/add-apartment.php. The manipulation of the argument apartmentno results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Affected products
CodeAstro · Apartment Visitor Management System
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — CodeAstro Apartment Visitor Management System

In the same product, most dangerous first.

CVE-2026-77020MEDIUMCodeAstro Apartment Visitor Management System password-recovery.php sql injectionEPSS 0.4%CVE-2026-77019MEDIUMCodeAstro Apartment Visitor Management System forgotpw.php sql injectionEPSS 0.4%CVE-2026-14640MEDIUMCodeAstro Apartment Visitor Management System Login index.php sql injectionEPSS 0.4%CVE-2026-14798MEDIUMCodeAstro Apartment Visitor Management System visitor-entry.php sql injectionEPSS 0.3%CVE-2026-14797MEDIUMCodeAstro Apartment Visitor Management System edit-apartment.php sql injectionEPSS 0.3%CVE-2026-14796MEDIUMCodeAstro Apartment Visitor Management System report.php sql injectionEPSS 0.3%