Vulnerability · Published Jun 4, 2026 · Assigned by VulDB
CVE-2026-10876SourceCodester Ship Ferry Ticket Reservation System admin improper authorization
Medium 6.3
In plain English
A medium-severity security flaw in Ship Ferry Ticket Reservation System from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).
Official description
A weakness has been identified in SourceCodester Ship Ferry Ticket Reservation System 1.0. This affects an unknown function of the file /admin/. This manipulation of the argument page causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Ship Ferry Ticket Reservation System | 1.0 |
Weakness: CWE-285, CWE-266 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
References
- VDB-368366 | SourceCodester Ship Ferry Ticket Reservation System admin improper authorization vdb-entry, technical-description
- VDB-368366 | CTI Indicators (IOB, IOC, TTP, IOA) signature, permissions-required
- CVE-2026-10876 | CVE Analysis and Report third-party-advisory
- Submit #831870 | SourceCodester Ship/Ferry Ticket Reservation System 1.0 Broken Access Control third-party-advisory
- https://medium.com/@hemantrajbhati5555/missing-authorization-in-sourcecodester-ship-ferry-ticket-reservation-system-leads-to-unauthorized-7783134d6596 broken-link, exploit
- https://www.sourcecodester.com/ product