Main
Vulnerability Database
Exploits
ID:12585 - Exploit for Observable Response Discrepancy in ChurchCRM - CVE-2026-40485
ID:12585 - Exploit for Observable Response Discrepancy in ChurchCRM - CVE-2026-40485
Published: April 13, 2026
Vulnerability identifier: #VU125846
Vulnerability risk: Medium
CVE-ID: CVE-2026-40485
CWE-ID: CWE-204
Exploitation vector: Remote access
Vulnerable software:
ChurchCRM
ChurchCRM
Link to public exploit:
Vulnerability description
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to differential response in Public Login API. A remote attacker can gain unauthorized access to sensitive information on the system.
Remediation
Install updates from vendor's website.