CVE-2026-7109 | code-projects Invoice System in Laravel 1.0 API Endpoint /item improper authorization

A vulnerability was found in code-projects Invoice System in Laravel 1.0. It has been rated as critical. This impacts an unknown function of the file /item of the component API Endpoint. Performing a manipulation results in improper authorization.

This vulnerability is cataloged as CVE-2026-7109. It is possible to initiate the attack remotely. Furthermore, there is an exploit available.