CVE-2026-7091 | code-projects Invoice System in Laravel 1.0 User Management /user improper authorization

A vulnerability was found in code-projects Invoice System in Laravel 1.0. It has been classified as critical. This impacts an unknown function of the file /user of the component User Management Handler. This manipulation causes improper authorization.

This vulnerability is registered as CVE-2026-7091. Remote exploitation of the attack is possible. Furthermore, an exploit is available.