CVE-2026-114267: Missing Authorization in SourceCodester Food Order Management System

This vulnerability affects SourceCodester Food Order Management System 1.0, specifically an unknown function within the admin endpoint component. The flaw is due to missing authorization checks, enabling remote attackers to bypass access controls. The vulnerability has a CVSS 4.0 base score of 6.9, indicating a medium severity level. Exploit code is publicly available, increasing the risk of exploitation. No vendor advisory or patch information is provided, so the remediation status is unknown.

The missing authorization vulnerability allows remote attackers to perform unauthorized actions on the admin endpoint of the affected system. This could lead to unauthorized access or manipulation of administrative functions, potentially compromising the integrity or availability of the system. The exact impact depends on the specific admin functions accessible without authorization.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the admin endpoint by network controls or other means to limit exposure. Monitor for suspicious activity related to admin functions and apply compensating controls where possible.