Codeastro · Apartment Visitor Management System · CVE-2026-14640
**Name of the Vulnerable Software and Affected Versions**
CodeAstro Apartment Visitor Management System version 1.0
**Description**
An issue exists in the Login component within the `/index.php` file. Manipulating the `Username` variable allows for SQL injection, which is a technique used to interfere with the queries that an application makes to its database. This flaw enables remote exploitation.
**Recommendations**
As a temporary mitigation, restrict access to the `/index.php` file or the Login component. At the moment, there is no information about a newer version that contains a fix for this vulnerability.