CVE-2026-76799 affects code-projects Login Registration System 1.0. The vulnerability is due to a weakness in the SQL Database Backup Handler component, in the file /loginsystem/database/login_registration_system.sql, which allows unauthorized remote access to files or directories. The attack vector is network-based with low attack complexity and no privileges or user interaction required. The vulnerability has a CVSS 4.0 base score of 6.9 (medium severity). Exploit code has been publicly released, but no active exploitation is reported.

An attacker can remotely access files or directories on the affected system without authentication or user interaction. This could lead to unauthorized disclosure of sensitive information stored in those files or directories. The vulnerability does not require privileges or user interaction, increasing its potential impact. However, there is no indication of further impact such as code execution or system compromise.

No official patch or remediation guidance is provided in the available data. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict external access to the affected system and monitor for suspicious activity related to file access attempts.