CVE-2026-7144: 1000 Projects Portfolio Management System Mca

Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days.

A security flaw has been discovered in 1000 Projects Portfolio Management System MCA 1.0. This impacts an unknown function of the file update_passwd_process.php. The manipulation of the argument temp_user results in authorization bypass. The attack can be launched remotely. The exploit has been released to the public and may be used for attacks.

Affected products

Published 2026-04-27. Last modified 2026-06-17.