CVE-2026-66028

Name of the Vulnerable Software and Affected Versions Ekushey Project Manager CRM versions prior to 5.1

Description A missing uniqueness constraint allows authenticated administrators to create duplicate client accounts using identical email and password credentials. The lack of enforcement on the email field enables the creation of conflicting account states where multiple accounts share the same email address but have different passwords, leading to unpredictable authentication behavior and unauthorized account access.

Recommendations Update Ekushey Project Manager CRM to a version newer than 5.0.