CVE-2026-112143 Details
Description
A security flaw has been discovered in satya-vinay Events-Management-System up to 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. Affected by this issue is some unknown functionality. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been released to the public and may be used for attacks. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet.
A vulnerability allowing missing authentication has been identified in Satya-Vinay Events Management System, in all versions prior to commit 437c77ceb69bf9fe2e3f4f46f7871b83f425383a. The application lacks any authentication mechanism, leaving critical functions and registrant data exposed to anonymous users. This issue affects multiple endpoints, including those for editing and deleting records, as well as pages that display registrant information. The vulnerability can be exploited remotely, and the public exploit is available.
No authentication layer exists in the application. To address this vulnerability, an authentication mechanism should be implemented, along with access control checks for critical functions.
Metrics
CVSS 4.0 Severity and Vector Strings:
VolerionCVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
Volerion
Assessed Oct 19, 2026CISA-ADP
Assessed Oct 19, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/satya-vinay/Events-Management-System/ | [email protected] | ProductSource CodeVendor |
| https://github.com/satya-vinay/Events-Management-System/issues/4 | [email protected] | ExploitIssue TrackingTechnical DescriptionVendor |
| https://vuldb.com/cve/CVE-2026-112143 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/submit/1013211 | [email protected] | Issue TrackingPermission Required |
| https://vuldb.com/vuln/422248 | [email protected] | AdvisoryPermission Required |
| https://vuldb.com/vuln/422248/cti | [email protected] | AdvisoryContent Wall |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-287 | Improper Authentication | [email protected] |
| CWE-306 | Missing Authentication for Critical Function | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| satya-vinay Events-Management-System | 437c77ceb69bf9fe2e3f4f46f7871b83f425383a |
CPE
Remediation
| |
Change History
2 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Oct 19, 2026 | CVE Modified | CISA-ADP |
| Oct 19, 2026 | New CVE Received | [email protected] |