CVE-2026-116604

medium

Description

A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/delete_admin.php. The manipulation of the argument ID leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.

References

https://www.sourcecodester.com/

https://vuldb.com/vuln/426510/cti

https://vuldb.com/vuln/426510

https://vuldb.com/submit/1022963

https://vuldb.com/cve/CVE-2026-116604

https://github.com/CyberShailendra/SourceCodesterAuthenticationonAdminDeleteEndpoints

https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-110538

Details

Source: Mitre, NVD

Published: 2026-10-27

Updated: 2026-10-27

Risk Information

CVSS v2

Base Score: 6.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:N/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 6.5

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Severity: Medium

CVSS v4

Base Score: 6.9

Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N

Severity: Medium

EPSS

EPSS: 0.00569