What is CVE-2026-77681?

CVE-2026-77681 is a medium-severity vulnerability in Codeastro Online Job Portal, classified under Improper Access Control. CVSS score: 6.3/10. Published 2026-08-21.

How severe is CVE-2026-77681?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Arbitrary file upload in Codeastro Online Job Portal

CVE-2026-77681

A vulnerability was identified in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/update-profile.php. The manipulation of the argument Name leads to unrestricted upload. The attack can be initiated remotely. The exploit is publicly available and might be used.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Codeastro Online Job Portal — versions 1.0

Weakness classification (CWE)

References

cna@vuldb.com (technical-description, vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (issue-tracking, exploit)
cna@vuldb.com (product)

Frequently asked questions

What is CVE-2026-77681?: CVE-2026-77681 is a medium-severity vulnerability in Codeastro Online Job Portal, classified under Improper Access Control. CVSS score: 6.3/10. Published 2026-08-21.
How severe is CVE-2026-77681?: Medium severity. CVSS v3 base score is 6.3 out of 10.