CVE-2026-86179: Information Disclosure in code-projects Daily Expense Manager

This vulnerability affects code-projects Daily Expense Manager 1.0 and involves an information disclosure flaw in the Database Backup Handler component's exp_ak.sql file. The issue allows remote attackers to manipulate the system to disclose information without requiring privileges or user interaction. The CVSS 4.0 base score is 6.9, indicating a medium severity level. The attack vector is network-based with low complexity and no privileges or user interaction needed. The vulnerability does not affect confidentiality, integrity, or availability beyond limited information disclosure. No patch or remediation details are provided in the available data.

Successful exploitation of this vulnerability can lead to unauthorized disclosure of information from the affected system. Since the vulnerability can be exploited remotely without authentication, it poses a risk of sensitive data exposure. However, the impact is limited to information disclosure and does not include integrity or availability compromise. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users of Daily Expense Manager 1.0 should monitor the vendor's communications for updates. Until a patch is available, consider restricting network access to the affected component or applying compensating controls to limit exposure.