Skip to content
Threat Feed
Subscribe

Vendor

PROG MIS

3 briefs RSS
high advisory

CVE-2026-14809: Unauthenticated SQL Injection in Prog Management System

A SQL Injection vulnerability, identified as CVE-2026-14809, exists in the Prog Management System developed by PROG MIS, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read database contents.

Prog Management System sql-injection vulnerability web cve high-severity
1r 2t 1c
critical advisory

CVE-2026-14808 — Prog Management System Sensitive Information Exposure

A critical vulnerability, CVE-2026-14808, in the Prog Management System developed by PROG MIS allows unauthenticated remote attackers to view a specific web page and obtain sensitive database account credentials, including the username and password, with high impact on confidentiality, integrity, and availability.

Prog Management System sensitive-data-exposure web-vulnerability critical-vulnerability cwe-497 database-credentials
2t 1c 2i
critical advisory

CVE-2026-14807: PROG MIS ERP App Hard-coded Credentials Vulnerability

An unauthenticated remote attacker can exploit a Use of Hard-coded Credentials vulnerability (CWE-798) in the ERP App developed by PROG MIS, allowing the attacker to log in to view application code and obtain database account and password information, leading to high impact on confidentiality, integrity, and availability.

ERP App hard-coded-credentials erp web-application vulnerability
3t 1c