CVE-2026-7143

A vulnerability was identified in 1000 Projects Portfolio Management System MCA up to 1.0. This affects an unknown function of the file /admin/block_status.php. The manipulation of the argument q leads to sql injection. The attack can be initiated remotely. The exploit is publicly available and might be used.

• CWE-74
• CWE-89

• https://1000projects.org/
• https://github.com/9str0IL/CVE/issues/3
• https://vuldb.com/submit/801607
• https://vuldb.com/vuln/359742
• https://vuldb.com/vuln/359742/cti

Published

Apr 27, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-71398Adobe Campaign Classic (ACC) is affected by an Incorrect Aut…10
• CVE-2026-7140A vulnerability has been found in Totolink A8000RU 7.1cu.643…9.8
• CVE-2026-71407A Stack-based Buffer Overflow vulnerability [CWE-121] vulner…5.6
• CVE-2026-71408A allocation of resources without limits or throttling vulne…5.3
• CVE-2026-7141A vulnerability was found in vllm up to 0.19.0. The affected…5.6
• CVE-2026-7142A vulnerability was determined in Wooey up to 0.13.2. The im…6.3
• CVE-2026-71430node-re2 provides RE2 regular expression bindings for Node.j…6.2
• CVE-2026-71433LangGraph Checkpoint Postgres and SQLite Checkpoint are the …5.3
• CVE-2026-71434Statamic is a Laravel and Git powered content management sys…5.3
• CVE-2026-71435Statamic is a Laravel and Git powered content management sys…6.1
• CVE-2026-71436Mermaid is a JavaScript tool that uses Markdown-inspired tex…5.3
• CVE-2026-71437Mermaid is a JavaScript tool that uses Markdown-inspired tex…6.5