Daily digest

Automated CVE article

CVE-2026-14807 Daily CVE Watchlist Note

ERP App developed by PROG MIS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to view application code and obtain the database account and password.

Rank 6CRITICAL 9.8EPSS 36.9%

Automation Boundary

This is an automated CVE watchlist article generated from public vulnerability-prioritization feeds. It is not a reviewed threat-activity brief and does not claim active exploitation unless the source data includes an exploitation signal.

CVE Snapshot

  • CVE: CVE-2026-14807
  • Daily rank: 6
  • Severity: CRITICAL
  • CVSS: 9.8
  • EPSS percentile: 36.9%
  • Exploitation signal in source data: no
  • NVD publication time: 2026-07-06T08:16:36.070Z

Source Summary

ERP App developed by PROG MIS has a Use of Hard-coded Credentials vulnerability, allowing unauthenticated remote attackers to log in to view application code and obtain the database account and password.

Defender Review Notes

  • Confirm whether the affected product appears in your environment before escalating.
  • Check vendor guidance and patch availability from the linked NVD reference.
  • Treat this as prioritization input, not incident evidence, when no exploitation signal is present.
  • Promote to reviewed threat activity only if a reliable source later documents exploitation, campaign use, actor activity, ransomware use, or CISA KEV inclusion.

Source Notes

This article was generated from the daily digest 2026-07-06-top-10-cves using NVD publication data, CISA KEV context, and FIRST EPSS enrichment.

Defender review

Investigation checklist

Automated CVE articles prioritize review. They do not claim environment exposure or exploitation unless cited source data supports it.

CVE-2026-14807

Confirm whether affected products for CVE-2026-14807 exist in your environment.

CVE-2026-14807

Check whether any affected asset is externally exposed or business critical.

CVE-2026-14807

Compare CISA KEV, vendor, and NVD source status before escalating.

CVE-2026-14807

Record compensating controls and detection coverage separately from CVSS.

Record history

Update history

Update history

Published
2026-07-06
Generated
2026-07-07T05:49:49.735Z
Source digest
2026-07-06-top-10-cves