CVE-2026-7093 — Code-Projects Invoice System In Laravel Vulnerability

title: CVE-2026-7093 - Invoice System Improper Authorization via ID Manipulation
id: scw-2026-04-27-ai-1
status: experimental
level: high
description: |
  This rule detects attempts to exploit CVE-2026-7093 by targeting the '/invoice/' endpoint and manipulating the 'ID' parameter, which could lead to improper authorization. It looks for requests to the invoice endpoint with an ID parameter and an unexpected status code (403 Forbidden or 401 Unauthorized), indicating a potential authorization bypass attempt.
author: SCW Feed Engine (AI-generated)
date: 2026-04-27
references:
  - https://shimiscyberworld.com/posts/nvd-CVE-2026-7093/
tags:
  - attack.initial_access
  - attack.t1190
logsource:
    category: webserver
detection:
  selection:
      cs-uri|contains:
          - '/invoice/'
      cs-uri-query|contains:
          - 'ID='
      sc-status:
          - 403
          - 401
      condition: selection
falsepositives:
  - Legitimate administrative activity

Source: Shimi's Cyber World · License & reuse