Exposure of Sensitive Information in Prog Management System by PROG MIS
CVE-2026-14808

9.3CRITICAL

Key Information:

Vendor

Prog Mis

Status
Prog Management System
Vendor
CVE Published:
6 July 2026

What is CVE-2026-14808?

The Prog Management System by PROG MIS is susceptible to an exposure of sensitive information vulnerability that enables unauthenticated remote attackers to access specific pages. This flaw potentially allows them to retrieve sensitive data, including database credentials. Organizations using this management system must review their configurations and apply necessary security patches to mitigate the risk of unauthorized information disclosure.

Affected Version(s)

Prog Management System all

References

https://www.twcert.org.tw/tw/cp-132-11025-fa1d9-1.html
third-party-advisory
https://www.twcert.org.tw/en/cp-139-11026-3df18-2.html
third-party-advisory

CVSS V4

Score:
9.3
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.