CVE-2026-7071 MEDIUM

CVE-2026-7071: CodeAstro Online Job Portal user-cvs file information disclosure

Vendor Codeastro
Product Online Job Portal
Weakness CWE-538
Published April 27, 2026
Last update April 27, 2026
View on NVD All CVEs

CVSS base score

6.9/10
Attack vector Network
Attack complexity Low
Privileges required None
User interaction None
Confidentiality —
Integrity —

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

What the vulnerability does

01Description

A security vulnerability has been detected in CodeAstro Online Job Portal 1.0. Affected by this vulnerability is an unknown functionality of the file /users/user-cvs/. The manipulation leads to file and directory information exposure. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used.

Key dates

02Disclosure timeline

April 27, 2026 CVE published
April 27, 2026 Record updated