CVE-2026-14798

Description

A vulnerability was identified in CodeAstro Apartment Visitor Management System 1.0. This issue affects some unknown processing of the file /apartment-visitor/visitor-entry.php. The manipulation of the argument visname leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

CVSS Vector

References

• https://codeastro.com/
• https://github.com/lilukun337/cve/issues/10
• https://vuldb.com/cve/CVE-2026-14798
• https://vuldb.com/submit/850852
• https://vuldb.com/vuln/376392
• https://vuldb.com/vuln/376392/cti