CVE-2026-78142

Received Received - Intake

Authorization Bypass in Barangay Resident Profiling Management System

Publication date: 2026-08-23

Last updated on: 2026-08-23

Assigner: VulDB

Description

A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archived_records.php of the component Restore/Delete. The manipulation of the argument resident_id results in authorization bypass. The attack may be launched remotely. The exploit has been made public and could be used.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-08-23

Last Modified

2026-08-23

Generated

2026-08-24

AI Q&A

2026-08-24

EPSS Evaluated

N/A

NVD

CVE-2026-78142

EUVD

EUVD-2026-64667

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-285	The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

This vulnerability is an authorization bypass in the Barangay Resident Profiling Management System 1.0. It allows remote attackers to manipulate the resident_id argument in the /archived_records.php file to gain unauthorized access. The exploit has been publicly disclosed.

Detection Guidance

This vulnerability involves an authorization bypass in the Barangay Resident Profiling Management System 1.0 via the resident_id parameter in /archived_records.php. To detect it, inspect HTTP requests to this endpoint for improper access controls. Check if manipulating resident_id grants unauthorized access to records. No specific commands are provided in the context.

Impact Analysis

An attacker could exploit this to bypass authorization and access sensitive resident data without proper permissions. This could lead to unauthorized viewing, modification, or deletion of records.

Compliance Impact

This vulnerability could lead to unauthorized access or disclosure of personal data, violating GDPR and HIPAA requirements for data protection and access controls. Non-compliance may result in legal penalties.

Mitigation Strategies

Immediately restrict access to /archived_records.php and validate all resident_id inputs to prevent unauthorized access. Remove any public exploit code from your environment and monitor for unusual activity.

Hi! I’m here to help you understand CVE-2026-78142. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70