CVE-2026-116604

EUVD-2026-110538
A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/delete_admin.php. The manipulation of the argument ID leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
6.5 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Awaiting analysis
This vulnerability is currently awaiting analysis.
Base Score
CVSS 3.x
EPSS Score
Percentile: 46.91%
Common Weakness Enumeration
References
https://github.com/CyberShailendra/SourceCodesterAuthenticationonAdminDeleteEndpoints
https://vuldb.com/cve/CVE-2026-116604
https://vuldb.com/submit/1022963
https://vuldb.com/vuln/426510
https://vuldb.com/vuln/426510/cti
https://www.sourcecodester.com/