Unauthenticated Database Credential Exposure in PROG MIS

CVE-2026-14808 represents a critical vulnerability in the PROG Management System that exposes database credentials to unauthenticated attackers. By simply accessing a specific page, threat actors can obtain full database account names and passwords—the keys to an organization's most sensitive data. This vulnerability affects organizations using PROG MIS for management operations, potentially including healthcare, finance, and government sectors that rely on program management systems. With a CVSS score of 9.8, this vulnerability requires immediate patching as it provides attackers with direct database access, enabling data exfiltration, manipulation, or destruction without requiring any authentication or exploitation techniques.

While this CVE currently maps to CWE-497 (Exposure of Sensitive Information) rather than specific MITRE ATT&CK techniques, Casky's Claude-powered analysis would detect the attack patterns underlying exploitation. Practitioners using Casky would identify reconnaissance activities (ATT&CK technique T1592 or T1598) as attackers probe for the vulnerable page, followed by credential access (T1589/T1590) when database credentials are exposed. The platform's 754 security skills enable detection of suspicious unauthenticated page access patterns, credential material in web responses, and subsequent database connection attempts from unexpected sources. Security teams would see findings highlighting unusual access to sensitive configuration pages, exposed credential strings in HTTP responses, and database authentication from foreign IP addresses—all indicators that exploitation has occurred or is underway.