CVE-2026-14808 is an information exposure vulnerability in the PROG MIS Prog Management System. It allows unauthenticated remote attackers to view a particular page that discloses the database account and password. The vulnerability is classified under CWE-497 (Exposure of Sensitive Information to an Unauthorized Actor). The CVSS 4.0 vector indicates network attack vector, low attack complexity, no privileges or user interaction required, and high impact on confidentiality, integrity, and availability. No patch or remediation level has been provided by the vendor or authoritative sources as of the publication date.

Successful exploitation of this vulnerability enables attackers to obtain database credentials without authentication, potentially leading to unauthorized access, data compromise, and further system exploitation. The critical CVSS score reflects the high risk posed by this exposure of sensitive information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected system and monitor for unauthorized access attempts. Avoid exposing the vulnerable page to untrusted networks.