CVE-2026-78142 PUBLISHED

A vulnerability was found in code-projects Barangay Resident Profiling Management System 1.0. This impacts an unknown function of the file /archived_records.php of the component Restore/Delete. The manipulation of the argument resident_id results in authorization bypass. The attack may be launched remotely. The exploit has been made public and could be used.

• c4ttr4ck (VulDB User) reporter

• VDB-394525 | code-projects Barangay Resident Profiling Management System Restore/Delete archived_records.php authorization
• VDB-394525 | CTI Indicators (IOB, IOC, IOA)
• CVE-2026-78142 | CVE Analysis and Report
• Submit #882422 | code-projects Barangay Resident Profiling Management System (BRPMS) / Barangay San Fabian 1.0 Insecure Direct Object Reference (IDOR)
• https://gist.github.com/c4ttr4ck/190b532b4b239fdc8f6fb72d89bde2c8
• https://code-projects.org/

• Authorization Bypass CWE
• Improper Authorization CWE