CVE-2026-15677
Last modified
CVE-2026-15677 is a high-severity vulnerability rated 7.3/10 on the CVSS scale. A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. EPSS estimates a 0.29% chance of exploitation in the next 30 days.
Description
A weakness has been identified in code-projects Online Job Portal 1.0. This affects an unknown function of the file /JobSeekerInsert.php. Executing a manipulation of the argument txtFile can lead to unrestricted upload. The attack can be executed remotely. The exploit has been made available to the public and could be used for attacks.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
Affected Software
Source: CNA advisory (CVE.org). NVD analysis pending.
| Vendor | Product | Versions |
|---|---|---|
| code-projects | Online Job Portal | 1.0 |
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-15677?
How severe is CVE-2026-15677?
How do I fix CVE-2026-15677?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-15670The SMS Alert – SMS & OTP for WooCommerce, Order Notificatio…4.9
- CVE-2026-15671The SMS Alert – SMS & OTP for WooCommerce, Order Notificatio…4.9
- CVE-2026-15672A vulnerability was determined in itsourcecode Electronic Ju…6.3
- CVE-2026-15673The SMS Alert – SMS & OTP for WooCommerce, Order Notificatio…4.4
- CVE-2026-15675A vulnerability was identified in code-projects Online Job P…7.3
- CVE-2026-15676A security flaw has been discovered in code-projects Online …7.3
- CVE-2026-15678A security vulnerability has been detected in code-projects …3.5
- CVE-2026-1568Rapid7 InsightVM versions before 8.34.0 contain a signature …9.6
- CVE-2026-15680Lorex 2K Indoor Wi-Fi Security Camera CDeviceOperator Format…7.5
- CVE-2026-15681AnyDesk Screen Recording Link Following Denial-of-Service Vu…5.5
- CVE-2026-15682AnyDesk Support Information Link Following Denial-of-Service…5.5
- CVE-2026-15683Lorex 2K Indoor Wi-Fi Security Camera Device Management Serv…7.5
Are you affected by CVE-2026-15677?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST