CVE-2026-112143: Missing Authentication in satya-vinay Events-Management-System

This vulnerability in satya-vinay Events-Management-System results from missing authentication checks in some unknown functionality across multiple endpoints. It allows remote attackers to manipulate the system without authentication. The product's rolling release model prevents precise version identification for affected or fixed releases. The vulnerability has a CVSS 4.0 base score of 6.9, indicating medium severity. Although the project was notified early, no response or patch has been issued. Public exploit code has been released, potentially facilitating attacks.

Remote attackers can exploit missing authentication to perform unauthorized actions on the affected system. This could lead to unauthorized access or manipulation of event management functionalities. The availability of public exploit code increases the likelihood of exploitation. The exact impact depends on the specific functionality affected, which is not detailed in the available information.

No official fix or patch is currently available, and the vendor has not responded to the issue report. Users should monitor the vendor's communications for updates. Until a fix is provided, restricting network access to the affected system and implementing additional authentication controls where possible may reduce exposure.