CVE-2026-7114 | defend.network

What is CVE-2026-7114?

A vulnerability was determined in code-projects Employee Management System 1.0. This affects an unknown part of the file 370project/edit.php. This manipulation of the argument ID causes sql injection. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized.

CVSS6.3 NVD 3.1

SeverityMEDIUM

ExploitationNo exploitation reported

EPSS<1% · P9

Triage statusNo Known Exploit

ActionSchedule for next cycle

CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

NVD published2026-04-27

NVD last modified2026-06-17

Timeline

2026-04-27Published to the U.S. National Vulnerability Database (NVD)
2026-06-17NVD record last updated

Affected product

See advisory

Remediation Steps

Apply latest Ivanti Connect Secure firmware update immediately.
Run Ivanti Integrity Checker Tool (ICT) to detect compromise.
If compromise suspected, factory reset before applying patch.
Review VPN connection logs for unusual access patterns.
Consider migrating to ZTNA for long-term VPN attack surface reduction.

References

Referenced in our briefings & reports

Vulnerability Priority Report – Week 3 of March 2026 (March 14–20)

Browse all tracked CVEs in the defend.network CVE database →

🤖 This CVE page is generated by defend.network from NVD, CISA KEV, EPSS, and our verified daily briefings. Severity and exploitation data come from official sources; always verify remediation steps against the official vendor advisory before acting in production.