CVE-2026-10243

תיאור (מקור, אנגלית)

A security vulnerability has been detected in code-projects Smart Parking System 1.0. Affected is an unknown function of the component Admin Endpoint. Such manipulation leads to missing authentication. It is possible to launch the attack remotely. The exploit has been disclosed publicly and may be used. Multiple endpoints are affected.

מדדים

CVSS 3.1

7.3 (HIGH) מקור הציון: CNA CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CVSS 4.0

5.5 (MEDIUM) מקור הציון: CNA CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — סבירות ניצול

1% (אחוזון 000) נכון ל-7/8/2026

CWE

CWE-287, CWE-306

קישורים

• https://code-projects.org/
• https://github.com/Xmyronn/smart-parking-system-broken-access.git
• https://vuldb.com/cve/CVE-2026-10243
• https://vuldb.com/submit/823871
• https://vuldb.com/vuln/367521
• https://vuldb.com/vuln/367521/cti