CVE-2026-14689

Name of the Vulnerable Software and Affected Versions CodeAstro Apartment Visitor Management System version 1.0

Description A security flaw allows remote attackers to perform SQL injection, a technique used to manipulate database queries. The issue exists within an unknown function in the '/apartment-visitor/add-apartment.php' endpoint via the apartmentno variable.

Recommendations As a temporary mitigation, restrict access to the '/apartment-visitor/add-apartment.php' endpoint or avoid using the apartmentno variable until a fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.