<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:webfeeds="http://webfeeds.org/rss/1.0"><channel><title>Cpe:2.3:a:sourcecodester:food_order_management_system:*:*:*:*:*:*:*:* - CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/cpes/cpe2.3asourcecodesterfood_order_management_system/</link><description>Trending threats, MITRE ATT&amp;CK coverage, and detection metadata. Fed continuously.</description><generator>Hugo</generator><language>en</language><managingEditor>hello@craftedsignal.io</managingEditor><webMaster>hello@craftedsignal.io</webMaster><lastBuildDate>Wed, 21 Oct 2026 19:58:02 +0000</lastBuildDate><atom:link href="https://feed.craftedsignal.io/cpes/cpe2.3asourcecodesterfood_order_management_system/feed.xml" rel="self" type="application/rss+xml"/><image><url>https://feed.craftedsignal.io/favicon-32x32.png</url><title>CraftedSignal Threat Feed</title><link>https://feed.craftedsignal.io/</link><width>32</width><height>32</height></image><webfeeds:icon>https://feed.craftedsignal.io/favicon.svg</webfeeds:icon><item><title>SourceCodester Food Order Management System: Missing Authorization in Admin Endpoint (CVE-2026-114267)</title><link>https://feed.craftedsignal.io/briefs/2026-10-sourcecodester-food-order-management-system-auth-bypass/</link><pubDate>Wed, 21 Oct 2026 19:58:02 +0000</pubDate><author>hello@craftedsignal.io</author><guid isPermaLink="true">https://feed.craftedsignal.io/briefs/2026-10-sourcecodester-food-order-management-system-auth-bypass/</guid><description>CVE-2026-114267 affects SourceCodester Food Order Management System 1.0, where an unknown function in the Admin Endpoint component exhibits missing authorization.</description><content:encoded>&lt;p>A vulnerability has been identified in SourceCodester Food Order Management System 1.0. The vulnerability involves missing authorization within an unknown function of the Admin Endpoint component. The attack can be performed remotely, and public exploit code is available.&lt;/p>
</content:encoded><category domain="severity">high</category><category domain="type">advisory</category></item></channel></rss>