Medium severity5.4NVD Advisory· Published Jun 29, 2026· Updated Jun 29, 2026

CVE-2026-13549

Description

A security flaw has been discovered in CodeAstro Complaint Management System 1.0. The affected element is the function deletereport of the file application/controllers/Report.php of the component Report Endpoint. The manipulation results in authorization bypass. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.

Affected products

Codeastro/Complaint Management Systemllm-fuzzy
Range: = 1.0

Patches

Vulnerability mechanics

References

codeastro.comnvd
github.com/ashikmd0507/CVE/tree/main/Unauthenticated%20Arbitrary%20Report%20%26%20File%20Deletionnvd
vuldb.com/cve/CVE-2026-13549nvd
vuldb.com/submit/843260nvd
vuldb.com/vuln/374557nvd
vuldb.com/vuln/374557/ctinvd

News mentions

No linked articles in our index yet.

cvss	0.351
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000