CVE-2026-105170: Missing Authentication in kishor-23 food-waste-management-system

This vulnerability in the kishor-23 food-waste-management-system affects an unknown function in admin/signup.php related to the Admin Signup component. The issue is caused by missing authentication checks on the sign argument, enabling remote attackers to bypass authentication controls. The vulnerability has been publicly disclosed with an available exploit. Due to the product's rolling release model, no explicit affected or fixed versions are identified, and the vendor has not yet provided a response or patch.

An attacker can remotely exploit this vulnerability to bypass authentication mechanisms in the admin signup process. This could potentially allow unauthorized access or manipulation of administrative functions within the system. The CVSS score of 6.9 indicates a medium impact with low attack complexity and no required privileges or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patches are available, users should monitor official channels for updates. Until a fix is released, consider restricting access to the affected component or implementing additional authentication controls as a temporary measure.