Vulnerability in Creativeitem Ekushey Project Manager Crm
CVE-2026-66028
Ekushey Project Manager CRM through version 5.0 contains a missing uniqueness constraint vulnerability that allows authenticated administrators to create duplicate client accounts with identical email and password credentials. Attackers ca…
CVSS v3 metric
CVSS v3 base score 6.7 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:H.
Affected products
- Creativeitem Ekushey Project Manager Crm — versions 0
Weakness classification (CWE)
References
- disclosure@vulncheck.com (product)
- disclosure@vulncheck.com (technical-description, exploit)
- disclosure@vulncheck.com (third-party-advisory)
Frequently asked questions
- What is CVE-2026-66028?
- CVE-2026-66028 is a medium-severity vulnerability in Creativeitem Ekushey Project Manager Crm, classified under Incorrect Implementation of Authentication Algorithm. CVSS score: 6.7/10. Published 2026-07-27.
- How severe is CVE-2026-66028?
- Medium severity. CVSS v3 base score is 6.7 out of 10.