Skip to content
Threat Feed
high advisory

SourceCodester Food Order Management System: Missing Authorization in Admin Endpoint (CVE-2026-114267)

CVE-2026-114267 affects SourceCodester Food Order Management System 1.0, where an unknown function in the Admin Endpoint component exhibits missing authorization.

CVE search metadata

CVE search record: CVE-2026-114267. Severity: high. CVSS: 7.3. KEV: no. Product: Food Order Management System (1.0). Brief: SourceCodester Food Order Management System: Missing Authorization in Admin Endpoint (CVE-2026-114267). Brief link: https://feed.craftedsignal.io/briefs/2026-10-sourcecodester-food-order-management-system-auth-bypass/

Triage facts

Revision 1
Applicability
Food Order Management System (1.0)
Evidence
Unknown
Severity
High
Sources
1 public source
Freshness
Revision 1Oct 21, 19:58 UTC
Vulnerabilities
1 CVE
Source quality
A2Roughly even chance

A vulnerability has been identified in SourceCodester Food Order Management System 1.0. The vulnerability involves missing authorization within an unknown function of the Admin Endpoint component. The attack can be performed remotely, and public exploit code is available.