Exploit discussion active in current signal (2 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The manipulation of the argument role_id results in improper privilege management. The attack can be executed remotely. The exploit is now public and may be used.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
CodeAstro QR Code Attendance: Κρίσιμη ευπάθεια με δημόσιο exploit https://www.secnews.gr/734580/codeastro-qr-code-attendance-cve-2026-94048/?fsp_sid=13691
Post summary
The text announces a critical vulnerability in CodeAstro QR Code Attendance (CVE-2026-94048) and highlights the availability of a public exploit, linking to an article with further details.
CVE-2026-94048 A vulnerability was detected in CodeAstro QR Code Attendance Management System 1.0. This affects the function Save of the file app/Controllers/UserController.php. The… https://www.cve.org/CVERecord?id=CVE-2026-94048
Post summary
The text announces the discovery of CVE-2026-94048 affecting CodeAstro QR Code Attendance Management System 1.0, providing technical details about the vulnerable component but no mention of PoC, exploit code, active exploitation, or remediation steps.