The vulnerability CVE-2026-76799 affects code-projects Login Registration System 1.0. It is caused by improper access control or handling in the SQL Database Backup Handler component, allowing unauthorized remote access to files or directories via manipulation of the /loginsystem/database/login_registration_system.sql file. The vulnerability is remotely exploitable without authentication or user interaction, with low complexity and no privileges required. Public exploit code exists, increasing the risk of exploitation. No vendor-provided fix or mitigation details are currently available.

Successful exploitation could allow remote attackers to access sensitive files or directories on the affected system, potentially leading to information disclosure. The vulnerability does not require authentication or user interaction, increasing exposure. However, the CVSS vector indicates low impact on confidentiality and no impact on integrity or availability. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. In the absence of an official fix, restrict access to the affected file and directory, and monitor for suspicious remote access attempts. Avoid exposing the vulnerable system directly to untrusted networks until a patch or official mitigation is available.