CVE-2026-112144: Files or Directories Accessible in satya-vinay Events-Management-System

This vulnerability in the satya-vinay Events-Management-System involves unauthorized access to files or directories, stemming from a weakness in the project.sql file. The issue can be exploited remotely without privileges or user interaction, with low attack complexity. The vulnerability has been publicly disclosed with exploit code available. Due to the rolling release model of the product, exact affected versions are not specified. The vendor has been notified but no patch or remediation has been provided to date.

Successful exploitation allows remote attackers to access files or directories that should be protected, potentially exposing sensitive information. The vulnerability does not require authentication or user interaction and has low complexity, increasing the risk of exploitation. However, no active exploitation in the wild has been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded or issued a fix, users should monitor official channels for updates. Until a fix is available, consider restricting external access to the affected system and applying network-level controls to limit exposure.