Vulnerability · Published Oct 21, 2026 · Assigned by VulDB
CVE-2026-114267SourceCodester Food Order Management System Admin Endpoint authorization
High 7.3
In plain English
A high-severity missing authorization in Food Order Management System from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 24% of all known vulnerabilities).
Severity (CVSS 3.1)7.3High
Exploit odds (30 days)0.3%top 76.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the component Admin Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit is now public and may be used.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Food Order Management System | 1.0 |
Weakness: CWE-862, CWE-863 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-424699 | SourceCodester Food Order Management System Admin Endpoint authorization vdb-entry
- VDB-424699 | CTI Indicators (IOB, IOC) signature, permissions-required
- CVE-2026-114267 | CVE Analysis and Report third-party-advisory
- Submit #1018876 | SourceCodester Food Order Management System Unknown / Not specified Unauthenticated Administrative Access / Broken Access Control third-party-advisory
- https://github.com/amanaparvin123-pixel/security-research/blob/main/food-order-admin-access.md exploit
- https://www.sourcecodester.com/ product