---
id: CVE-2026-114267
title: SourceCodester Food Order Management System Admin Endpoint authorization
summary: >-
  A vulnerability was detected in SourceCodester Food Order Management System
  1.0. Affected is an unknown function of the component Admin Endpoint. The
  manipulation results in missing authorization. The attack may be performed
  from remote.…
severity: high
cvss: 7.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R'
cvssSource: cna
cwe:
  - CWE-862
  - CWE-863
vendor: SourceCodester
product: Food Order Management System
affected:
  - food_order_management_system 1.0
published: '2026-10-21'
updated: '2026-10-21'
sourceUpdated: '2026-10-21T18:30:12.152Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-114267'
references:
  - url: 'https://vuldb.com/vuln/424699'
    label: >-
      VDB-424699 | SourceCodester Food Order Management System Admin Endpoint
      authorization
  - url: 'https://vuldb.com/vuln/424699/cti'
    label: 'VDB-424699 | CTI Indicators (IOB, IOC)'
  - url: 'https://vuldb.com/cve/CVE-2026-114267'
    label: CVE-2026-114267 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/1018876'
    label: >-
      Submit #1018876 | SourceCodester Food Order Management System Unknown /
      Not specified Unauthenticated Administrative Access / Broken Access
      Control
  - url: >-
      https://github.com/amanaparvin123-pixel/security-research/blob/main/food-order-admin-access.md
  - url: 'https://www.sourcecodester.com/'
tags:
  - cve.org
ingestedAt: '2026-10-21T19:10:31.398Z'
---

## Overview

A vulnerability was detected in SourceCodester Food Order Management System 1.0. Affected is an unknown function of the component Admin Endpoint. The manipulation results in missing authorization. The attack may be performed from remote. The exploit is now public and may be used.

## Affected

- `food_order_management_system 1.0`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.