CVE WATCH / VULNERABILITY DETAIL
CVE-2026-127283
HIGHCVSS 7.3NVD feed
Published 13 November 2026 · tracked since 13 November 2026
Description
A vulnerability was identified in SourceCodester Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file admin/update_food.php of the component Admin Image Handler. Such manipulation of the argument cmd leads to unrestricted upload. The attack may be performed from
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog