The vulnerability CVE-2026-19342 affects an unknown function within the /index.php file of the Login component in code-projects Task Management System 1.0. It permits remote attackers to manipulate the Password argument, leading to improper authentication bypass. This is classified under CWE-287 (Improper Authentication). The CVSS 3.1 base score is 7.3 with vector AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L, indicating network attack vector, low attack complexity, no privileges or user interaction required, and impacts confidentiality, integrity, and availability to a limited extent. Public exploit code exists, but no known exploitation in the wild has been documented. No vendor advisory or patch information is available at this time.

Successful exploitation allows remote attackers to bypass authentication controls by manipulating the Password argument, potentially leading to unauthorized access with limited confidentiality, integrity, and availability impacts. This could enable attackers to access or modify data or disrupt service within the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected system where possible and monitor for suspicious authentication attempts. Avoid relying solely on this component for authentication security.