CVE-2026-114267: SourceCodester Food Order Management System Admin Endpoint authorization
A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the component Admin Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit is now public and may be used.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
The issue can be exploited remotely with no privileges or user interaction required. Public exploit availability increases the likelihood of exploitation attempts against reachable deployments.
What is the likely impact of successful exploitation?
The reported impact includes partial compromise of confidentiality, integrity, and availability. The vulnerability is described as missing authorization in an Admin Endpoint, but the specific affected function and actions available to an attacker are not identified.
Which versions are affected?
The affected product is SourceCodester Food Order Management System version 1.0. No fixed version or mitigation is provided in the available data.