CVE-2026-13549

Name of the Vulnerable Software and Affected Versions CodeAstro Complaint Management System version 1.0

Description An authorization bypass exists in the Report Endpoint component within the deletereport() function of the application/controllers/Report.php file. This flaw allows a remote attacker to bypass authorization requirements and execute unauthorized actions.

Recommendations As a temporary workaround, restrict access to the deletereport() function in the application/controllers/Report.php file until a fix is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.