CVE-2026-114267

7.3 HIGHpublic exploit available

Published 2026-10-21 · Updated 2026-10-22

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the component Admin Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit is now public and may be used.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CWE-862, CWE-863

Public exploit & PoC references

https://github.com/amanaparvin123-pixel/security-research/blob/main/food-order-admin-access.md

All references

https://github.com/amanaparvin123-pixel/security-research/blob/main/food-order-admin-access.md
https://vuldb.com/cve/CVE-2026-114267
https://vuldb.com/submit/1018876
https://vuldb.com/vuln/424699
https://vuldb.com/vuln/424699/cti
https://www.sourcecodester.com/

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

HIGHCVE-2026-100744PoC
MEDIUMCVE-2026-100879PoC
CRITICALCVE-2026-101000PoC
LOWCVE-2026-101139PoC
HIGHCVE-2026-102249PoC
UNSCOREDCVE-2026-103091PoC
MEDIUMCVE-2026-104054PoC
CRITICALCVE-2026-106511PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.