CVE-2026-78144: Authorization Bypass in code-projects Barangay Resident Profiling Management System

This vulnerability in Barangay Resident Profiling Management System 1.0 involves improper authorization checks in the /boarders.php file of the Boarder Management Module. By manipulating the ID parameter, an attacker with low privileges can bypass authorization controls remotely. The vulnerability has a CVSS 4.0 score of 5.3 (medium severity) and an exploit is publicly available. No patch or remediation information is provided in the available data.

An attacker can remotely bypass authorization controls by manipulating the ID parameter in the vulnerable component, potentially gaining unauthorized access to data or functionality within the Boarder Management Module. The impact is limited by the requirement of low privileges but no user interaction is needed. No evidence of active exploitation in the wild is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the affected module and monitor for suspicious activity related to manipulation of the ID parameter. Consider implementing additional access controls or input validation as a temporary mitigation.