CVE-2026-19345 in Task Management System

Prediction

by VulDB Data Team • 08/08/2026

A vulnerability was found in code-projects Task Management System 1.0. This affects an unknown part of the file /user/UpdateTaskStatus.php. The manipulation of the argument task_id/val results in missing authorization. It is possible to launch the attack remotely. The exploit has been made public and could be used.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-387181
• CPE: ready
• CWE: CWE-862 (confirmed)
• Exploit: Download
• CVSS: 6.5 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low
• Sector: Hostingprovider, Transportation, ...

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-19345
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-19345
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-19345/