A vulnerability classified as problematic was found in CodeAstro Complaint Management System 1.0. The affected element is the function deletereport of the file application/controllers/Report.php of the component Report Endpoint. The manipulation results in authorization bypass.

This vulnerability is identified as CVE-2026-13549. The attack can be executed remotely. Additionally, an exploit exists.