This vulnerability affects the Admin Endpoint component of code-projects Smart Parking System 1.0, where missing authentication allows remote attackers to access or manipulate administrative functions without credentials. The exact function affected is unspecified, but multiple endpoints are impacted. The CVSS 4.0 base score is 6.9, indicating a medium severity with network attack vector, no privileges required, no user interaction, and low to limited impact on confidentiality, integrity, and availability. The vulnerability was published on June 1, 2026, with no vendor remediation level or patch links provided.

The vulnerability allows remote unauthenticated attackers to access administrative endpoints, potentially leading to unauthorized actions within the Smart Parking System. The impact on confidentiality, integrity, and availability is rated as low to limited, but the lack of authentication could enable manipulation of system functions. No known exploits in the wild have been reported to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected Admin Endpoints where possible and monitor for unusual activity. Avoid exposing the Admin Endpoint to untrusted networks. Follow vendor channels for updates on patches or official mitigations.