CVE-2026-81202

HIGH 7.3

itsourcecode Payroll System CRUD Operation ajax.php delete missing authentication

CVSS Score

7.3

EPSS Score

0.0%

EPSS Percentile

0th

A flaw has been found in itsourcecode Payroll System 1.0. The impacted element is the function create/read/update/delete of the file ajax.php of the component CRUD Operation Handler. Executing a manipulation of the argument action can lead to missing authentication. The attack may be performed from remote. The exploit has been published and may be used.

CWE	CWE-306 CWE-287
Vendor	itsourcecode
Product	payroll system
Published	Aug 26, 2026

Stay Ahead of the Next One

Get instant alerts for itsourcecode payroll system

Be the first to know when new high vulnerabilities affecting itsourcecode payroll system are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Attack Vector

Attack Complexity

Privileges Required

User Interaction

Scope

Confidentiality

Integrity

Availability

Affected Versions

itsourcecode / Payroll System

1.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

vuldb.com: https://vuldb.com/vuln/395909 vuldb.com: https://vuldb.com/vuln/395909/cti vuldb.com: https://vuldb.com/cve/CVE-2026-81202 vuldb.com: https://vuldb.com/submit/886151 vuldb.com: https://vuldb.com/submit/886152 github.com: https://github.com/microwaveabi/vul/issues/7 itsourcecode.com: https://itsourcecode.com/

Credits

🔍 microwave (VulDB User)