Zero-Day & Vulnerability Intelligence Hub
Echtzeit-Tracking mit EPSS Exploit-Wahrscheinlichkeiten, Angriffsvektor-Decodern und KI-Patch-Anleitungen.
📊 Historien-Charts — Criticals-Trend · Vendors · EPSS-Verteilung
| Tier | CVEs | Anteil |
|---|---|---|
| ≥90 % | 754 | 0,2 % |
| ≥50 % | 3.337 | 0,9 % |
| ≥10 % | 22.177 | 5,7 % |
| <10 % | 362.842 | 93,2 % |
CVE-2026-98432
For those also getting annoyed with vendors not deploying a fix after giving a 9.8 rating, I found this great article with a generic NFT command that drops ip-options. The article also analyses the issue. I have managers in a state of panic
Android: SMS des Todes lässt Smartphones abstürzen – Google behebt schwere Sicherheitslücke in 14 bis 17
Google stopft regelmäßig Dutzende oder gar Hunderte Sicherheitslücken in Android und dennoch tauchen immer wieder neue Einfallstore auf, die bereits seit Jahren bestehen - jetzt ist erneut ein Fall bekannt geworden. Mit dem sogenannten Angr
CVE-2026-106279 | Google Chrome up to 154.0.8037.97 Passwords use after free (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as problematic. Affected by this issue is some unknown functionality of the component Passwords. Executing a manipulation can lead to use after free. This vulnerability is tracked as
CVE-2026-106278 | Google Chrome up to 154.0.8037.97 Select use after free (Nessus ID 363731 / WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as critical. This impacts an unknown function of the component Select. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-106278. The attack may be p
CVE-2026-106277 | Google Chrome up to 154.0.8037.97 Animation cross-domain policy (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as problematic. This affects an unknown part of the component Animation. The manipulation leads to permissive cross-domain policy with untrusted domains. This vulnerability
CVE-2026-106276 | Google Chrome up to 154.0.8037.97 Payments input validation (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as critical. Affected is an unknown function of the component Payments. Performing a manipulation results in improper input validation. This vulnerability is cataloged as CV
CVE-2026-106275 | Google Chrome up to 154.0.8037.97 GPU uninitialized pointer (WID-SEC-2026-3761)
A vulnerability, which was classified as problematic, has been found in Google Chrome. Impacted is an unknown function of the component GPU. The manipulation leads to uninitialized pointer. This vulnerability is referenced as CVE-2026-10627
CVE-2026-106274 | Google Chrome up to 154.0.8037.97 information disclosure (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been rated as problematic. The affected element is an unknown function. This manipulation causes information disclosure. This vulnerability appears as CVE-2026-106274. The attack may be ini
CVE-2026-106273 | Google Chrome up to 154.0.8037.97 Video uninitialized resource (WID-SEC-2026-3761)
A vulnerability marked as problematic has been reported in Google Chrome. The impacted element is an unknown function of the component Video. Performing a manipulation results in uninitialized resource. This vulnerability was named CVE-2026
CVE-2026-106272 | Google Chrome up to 154.0.8037.97 Chromoting information disclosure (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome. It has been classified as problematic. This issue affects some unknown processing of the component Chromoting. The manipulation leads to information disclosure. This vulnerability is documented as
CVE-2026-106271 | Google Chrome up to 154.0.8037.97 Workers improper authorization (WID-SEC-2026-3761)
A vulnerability has been found in Google Chrome and classified as problematic. This affects an unknown part of the component Workers. Performing a manipulation results in improper authorization. This vulnerability is cataloged as CVE-2026-1
CVE-2026-106270 | Google Chrome up to 154.0.8037.97 WebAppInstalls improper authorization (WID-SEC-2026-3761)
A vulnerability was found in Google Chrome and classified as critical. This vulnerability affects unknown code of the component WebAppInstalls. Executing a manipulation can lead to improper authorization. This vulnerability is registered as
CVE-2026-106269 | Google Chrome up to 154.0.8037.97 CSS use after free (WID-SEC-2026-3761)
A vulnerability, which was classified as critical, was found in Google Chrome. Affected by this issue is some unknown functionality of the component CSS. Such manipulation leads to use after free. This vulnerability is listed as CVE-2026-10
CVE-2026-104843 | astral-sh uv up to 0.12.17 Wheel Extraction path traversal (Nessus ID 374836)
A vulnerability classified as critical has been found in astral-sh uv up to 0.12.17. Affected by this issue is some unknown functionality of the component Wheel Extraction. Performing a manipulation results in path traversal. This vulnerabi
CVE-2025-30156 | Linux Kernel ceph improper authentication (Nessus ID 374838)
A vulnerability classified as very critical was found in Linux Kernel. The affected element is an unknown function of the component ceph. Executing a manipulation can lead to improper authentication. This vulnerability appears as CVE-2025-3
CVE-2026-98725 | Linux Kernel up to 6.12.112/6.18.55/7.2.9/7.3-rc5 nvmet-auth fabrics-cmd-auth.c nvmet_auth_challenge out-of-bounds write (Nessus ID 374839)
A vulnerability classified as very critical has been found in Linux Kernel up to 6.12.112/6.18.55/7.2.9/7.3-rc5. Impacted is the function nvmet_auth_challenge of the file drivers/nvme/target/fabrics-cmd-auth.c of the component nvmet-auth. T
CVE-2021-38185 | GNU cpio up to 2.13 Pattern File dstring.c ds_fgetstr integer overflow (Nessus ID 374841)
A vulnerability classified as critical has been found in GNU cpio up to 2.13. This issue affects the function ds_fgetstr of the file dstring.c of the component Pattern File Handler. The manipulation leads to integer overflow. This vulnerabi
CVE-2026-118475 | Red Hat Enterprise Linux PNG Image Parser buffer overflow (Nessus ID 374858)
A vulnerability was found in Red Hat Enterprise Linux. It has been classified as problematic. Affected by this issue is some unknown functionality of the component PNG Image Parser. The manipulation leads to buffer overflow. This vulnerabil
CVE-2026-107651 | Red Hat Eye of GNOME 6/7/8/9 PNG Metadata Reader buffer overflow (Nessus ID 374858)
A vulnerability labeled as problematic has been found in Red Hat Eye of GNOME 6/7/8/9. This affects an unknown part of the component PNG Metadata Reader. Such manipulation leads to buffer overflow. This vulnerability is referenced as CVE-20
CVE-2026-15195 | apidevtools json-schema-ref-parser up to 15.3.5 lib/pointer.ts Refs.set/Pointer.set prototype pollution (Issue 421)
A vulnerability was found in apidevtools json-schema-ref-parser and classified as critical. This impacts the function Refs.set/Pointer.set in the library lib/pointer.ts. Executing a manipulation can lead to improperly controlled modificatio
Hackers Scan BeyondTrust Remote Support Systems for Actively Exploited Zero-Day Flaw
Scanning activity targeting BeyondTrust Remote Support appliances raises concerns that exploitation of CVE-2026-102764 is expanding beyond targeted intrusions to opportunistic attacks. Previdian reported two probes against its decoy systems
CVE-2024-7358 | Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows MSI Installer getscreen.msi temp file
A vulnerability classified as critical was found in Point B Ltd Getscreen Agent up to 2.19.6/3.9.4 on Windows. This affects an unknown function of the file getscreen.msi of the component MSI Installer. The manipulation results in creation o
CVE-2026-20597 | MediaTek MT8893 Modem out-of-bounds (MOLY01758223 / EUVD-2026-115057)
A vulnerability described as critical has been identified in MediaTek MT2716, MT2735, MT2737, MT6739, MT6761, MT6762, MT6763, MT6765, MT6767, MT6768, MT6769, MT6771, MT6779, MT6781, MT6783, MT6785, MT6789, MT6813, MT6815, MT6833, MT6835, MT
CVE-2026-20596 | MediaTek Modem out-of-bounds (MOLY01758225 / EUVD-2026-115056)
A vulnerability marked as critical has been reported in MediaTek Modem. The impacted element is an unknown function. The manipulation leads to out-of-bounds read. This vulnerability is referenced as CVE-2026-20596. Remote exploitation of th
CVE-2026-20600 | MediaTek MT8883 denial of service (MOLY01416152 / EUVD-2026-114931)
A vulnerability classified as critical was found in MediaTek MT2716, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6982, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863, MT8873, MT8875 and
CVE-2026-20599 | MediaTek MT8893 privileges management (MOLY01790985 / EUVD-2026-114930)
A vulnerability, which was classified as very critical, has been found in MediaTek MT2716, MT2735, MT2737, MT6739, MT6761, MT6762, MT6763, MT6765, MT6767, MT6768, MT6769, MT6771, MT6779, MT6781, MT6783, MT6785, MT6789, MT6813, MT6815, MT683
CVE-2026-20598 | MediaTek MT8883 Modem integer overflow (MOLY01755742 / EUVD-2026-115058)
A vulnerability, which was classified as critical, was found in MediaTek MT2716, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6899, MT6982, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863,
CVE-2026-68589 | MediaTek MT8893 out-of-bounds write (MOLY01320076 / EUVD-2026-114933)
A vulnerability has been found in MediaTek MT2716, MT2735, MT2737, MT6813, MT6815, MT6833, MT6835, MT6853, MT6855, MT6858, MT6873, MT6875, MT6877, MT6878, MT6879, MT6880, MT6881, MT6883, MT6885, MT6886, MT6889, MT6890, MT6891, MT6893, MT689
CVE-2026-68588 | MediaTek MT8883 Modem integer overflow (MOLY01334054/MOLY01312486 / EUVD-2026-114932)
A vulnerability classified as critical has been found in MediaTek MT2716, MT6813, MT6815, MT6835, MT6858, MT6878, MT6881, MT6897, MT6899, MT6982, MT6986, MT6988, MT6991, MT6993, MT8668, MT8676, MT8678, MT8755, MT8775, MT8792, MT8793, MT8863
CVE-2026-75913 | Hmbown CodeWhale up to 0.8.63 git_show tool rev argument injection
A vulnerability was found in Hmbown CodeWhale up to 0.8.63. It has been rated as problematic. The impacted element is the function git_show of the component git_show tool. This manipulation of the argument rev causes argument injection. Thi
CVE-2026-75857 | Hmbown CodeWhale up to 0.8.63 exec_shell_interact injection
A vulnerability labeled as critical has been found in Hmbown CodeWhale up to 0.8.63. The impacted element is the function exec_shell_interact. Such manipulation leads to injection. This vulnerability is uniquely identified as CVE-2026-75857
CVE-2026-74600 | Linux Kernel up to 7.1.8 Page Table Check mm/page_table_check.c page_table_check_set/page_table_check_clear resource consumption (Nessus ID 339003 / WID-SEC-2026-2970)
A vulnerability classified as problematic has been found in Linux Kernel up to 7.1.8. The impacted element is the function page_table_check_set/page_table_check_clear of the file mm/page_table_check.c of the component Page Table Check. The
CVE-2026-74599 | Linux Kernel up to 6.18.44/7.1.8 ptdump mm/ptdump.c ptdump_walk_pgd race condition (WID-SEC-2026-2970)
A vulnerability, which was classified as very critical, has been found in Linux Kernel up to 6.18.44/7.1.8. The affected element is the function ptdump_walk_pgd of the file mm/ptdump.c of the component ptdump. The manipulation leads to race
CVE-2026-74544 | Linux Kernel up to 7.1.7/7.2-rc5 cls_u32 net/sched/cls_u32.c u32_change offshift out-of-bounds
A vulnerability classified as very critical was found in Linux Kernel up to 7.1.7/7.2-rc5. This vulnerability affects the function u32_change of the file net/sched/cls_u32.c of the component cls_u32. Such manipulation of the argument offshi
CVE-2026-74537 | Linux Kernel up to 6.18.43/7.1.7/7.2-rc5 Bluetooth iso_conn_ready use after free (Nessus ID 335855)
A vulnerability labeled as very critical has been found in Linux Kernel up to 6.18.43/7.1.7/7.2-rc5. The impacted element is the function iso_conn_ready of the component Bluetooth. Such manipulation leads to use after free. This vulnerabili
CVE-2026-74527 | Linux Kernel up to 7.1.7/7.2-rc5 octeontx2-af cgx_get_pkind/rvu_cgx_is_pkind_config_permitted state issue
A vulnerability classified as very critical has been found in Linux Kernel up to 7.1.7/7.2-rc5. Affected by this issue is the function cgx_get_pkind/rvu_cgx_is_pkind_config_permitted of the component octeontx2-af. The manipulation leads to
CVE-2026-74417 | Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4 radeon radeon_align_pitch integer overflow
A vulnerability, which was classified as very critical, was found in Linux Kernel up to 6.6.144/6.12.96/6.18.39/7.1.4. Affected is the function radeon_align_pitch of the component radeon. The manipulation results in integer overflow. This v
CVE-2026-74406 | Linux Kernel up to 7.1.4 vxlan vxlan_gro_prepare_receive null pointer dereference
A vulnerability marked as critical has been reported in Linux Kernel up to 6.1.177/6.6.144/6.12.96/6.18.39/7.1.4. Impacted is the function vxlan_gro_prepare_receive of the component vxlan. This manipulation causes null pointer dereference.
CVE-2026-74405 | Linux Kernel up to 6.18.39/7.1.4 OPP dev_pm_opp_add_dynamic race condition
A vulnerability classified as very critical has been found in Linux Kernel up to 6.18.39/7.1.4. This issue affects the function dev_pm_opp_add_dynamic of the component OPP. This manipulation causes race condition. This vulnerability is hand
CVE-2026-73198 | Red Hat FreeIPA I18n /ipa/i18n_messages memory allocation (EUVD-2026-63244 / Nessus ID 350078)
A vulnerability marked as problematic has been reported in Red Hat FreeIPA. This vulnerability affects unknown code of the file /ipa/i18n_messages of the component I18n. This manipulation causes uncontrolled memory allocation. The identific
CVE-2026-116639 | A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in cross site scripting. It is possible to initiate the attack remotely. The exploit is now public and may be used. This product is using a rolling release to provide continious delivery. Therefore, no version details for aff
A vulnerability was detected in MD-MAFUJUL-HASAN Online-Payroll-Management-System up to a8902bf64575e325f6d6bf93a55f7bd273ec58cd. Affected is an unknown function of the file chat.php. Performing a manipulation of the argument ID results in
CVE-2026-116839 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to make unauthorized changes and execute a Denial of Service (DoS) attack on the
CVE-2026-116838 | A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
A malicious actor who lures an authenticated user to a malicious page could exploit a Cross-Site Request Forgery (CSRF) vulnerability found in airMAX M devices to execute a Command Injection on the device.
CVE-2026-116623 | A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in missing authorization. The attack can be launched remotely. The exploit is now public and may be used.
A vulnerability was detected in code-projects Simple Content Management System 1.0. Impacted is an unknown function of the file /web/admin/welcome.php of the component Admin Interface. The manipulation of the argument addnews results in mis
CVE-2026-116837 | A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
A malicious actor with access to the adjacent network could exploit a Heap-based Buffer Overflow vulnerability found in airMAX M, LTU, SolarPoint, and SolarSwitch devices to execute arbitrary code on the device.
CVE-2026-116844 | Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PASV or PORT, file contents and directory listings cross the network unencrypted, even with mandatory encryption, letting on-path attackers read or modify them.
Fclairamb ftpserverlib through 0.32.4 contains a cleartext transmission vulnerability because TransferOpen checks only the transferTLS flag set by PROT, not whether the prepared data connection uses TLS. When a client sends PROT P after PAS
CVE-2026-116843 | Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .gitattributes and runs filter smudge, clean, or process commands before the trusted-folder check, executing attacker commands with user privileges.
Mistral Vibe before 3.0.3 contains a remote code execution vulnerability that allows attackers to run commands by defining git filter drivers in an untrusted repository's .git/config. When started with --worktree, git worktree add applies .
CVE-2026-116842 | DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash table count, causing memcpy to overflow the heap during startup and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains a heap buffer overflow vulnerability in the bundled libmpq libmpq__archive_dup routine when opening crafted MPQ archives. Attackers can supply an MPQ archive whose block table count exceeds its hash
CVE-2026-116841 | DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place a crafted .mpq archive in the game's data path, such as a mod, to trigger reads past mpq_map and crash the game.
DevilutionX 1.4.0 through 1.5.5 contains an out-of-bounds read vulnerability in the bundled libmpq libmpq__file_number_from_hash function that allows attackers to read heap memory via unchecked block_table_index values. Attackers can place
CVE-2026-116840 | llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor size pads to zero, causing an undersized data blob and out-of-bounds reads by consumers.
llama.cpp b5854 before b11275 contains an integer overflow vulnerability in gguf_init_from_reader that bypasses the CVE-2025-53630 size check when padding near-SIZE_MAX tensor sizes. Attackers can supply a crafted GGUF file whose tensor siz
CVE-2026-116829 | llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF files with enormous tensor extents that overflow ggml_nbytes() and strides, causing out-of-bounds memory access when buffers are sized from wrapped byte counts.
llama.cpp b10398 before b11301 contains an integer overflow vulnerability in gguf_init_from_reader that allows attackers to bypass tensor element-count validation by supplying shapes whose product wraps to zero. Attackers can craft GGUF fil
CVE-2026-116816 | llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like <0x-1> whose negative parsed value writes token ids before the bytes_ buffer during model loading, causing crashes or potential code execution.
llama.cpp b5899 before b10261 contains a heap out-of-bounds write vulnerability in llm_tokenizer_plamo2::build that allows attackers to corrupt heap memory via crafted GGUF models. Attackers can supply BYTE-typed token text like whose nega
CVE-2025-71439 | llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short tokenizer.ggml.tokens array, causing llama-cli or llama-server to read past id_to_token and crash.
llama.cpp before b5649 contains a heap out-of-bounds read vulnerability in llama_vocab::impl::print_info() that allows attackers to crash model loading via oversized special token IDs. Attackers can supply a crafted GGUF model with a short
CVE-2024-58400 | llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send integer-array prompts to the llama-server /completion endpoint with IDs outside 0 to n_vocab to read embedding memory out of bounds or crash the process.
llama.cpp before b3701 contains an out-of-bounds read vulnerability in llama_decode_internal and llama_encode_internal that allows remote unauthenticated attackers to read memory by supplying unvalidated token IDs. Attackers can send intege
CVE-2024-58399 | llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF model file with arbitrary 64-bit tensor offsets to crash the process or load adjacent process memory as model weights.
llama.cpp before b2731 contains an out-of-bounds read vulnerability in llama_model_loader that allows attackers to read memory outside the mapped model file via crafted GGUF tensor offsets. Attackers can supply a crafted or truncated GGUF m
CVE-2026-116836 | A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.
A malicious actor with access to the adjacent network and under certain conditions could exploit a Stored Cross-Site Scripting (XSS) vulnerability found in airMAX M devices to escalate privileges on the device.
CVE-2026-116620 | A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream<UTF8<char>>::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of-bounds read. The attack can be initiated remotely. The exploit has been disclosed publicly and may be used. The project was informed of the problem early through an issue report but has not responded yet.
A security vulnerability has been detected in Tencent RapidJSON up to 1.1.0. This issue affects the function GenericStringStream::Take in the library include/rapidjson/stream.h of the component Regex Parser. The manipulation leads to out-of
CVE-2026-116608 | A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function load_pretrained_model of the file videollama2/model/__init__.py of the component Model Loading. The manipulation of the argument _name_or_path leads to improper validation of integrity check value. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The project was informed of the problem
A security vulnerability has been detected in DAMO Academy VideoLLaMA2 up to 1.1. Affected by this issue is the function load_pretrained_model of the file videollama2/model/__init__.py of the component Model Loading. The manipulation of the
CVE-2026-116605 | A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side security. It is possible to launch the attack remotely. The exploit has been made public and could be used.
A vulnerability was found in SourceCodester Online Food Ordering System 1.0. The impacted element is an unknown function of the file order.php. The manipulation of the argument price/title results in client-side enforcement of server-side s
CVE-2026-116604 | A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/delete_admin.php. The manipulation of the argument ID leads to missing authentication. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
A vulnerability has been found in SourceCodester Online Food Ordering System 1.0. The affected element is an unknown function of the file admin/delete_admin.php. The manipulation of the argument ID leads to missing authentication. It is pos