CVE-2026-14725: Session Expiration in SourceCodester Online Boat Reservation System
CVE-2026-14725 is a medium severity vulnerability in SourceCodester Online Boat Reservation System version 1.0. It involves a session expiration issue triggered by an unknown functionality, which can be exploited remotely without user interaction. The vulnerability could allow an attacker to manipulate sessions, potentially disrupting user sessions. No official patch or remediation guidance is currently available from the vendor.
AI Analysis
Technical Summary
This vulnerability affects SourceCodester Online Boat Reservation System version 1.0 and involves manipulation of an unspecified functionality that leads to session expiration. The attack can be launched remotely without requiring user interaction or elevated privileges. The CVSS 4.0 base score is 5.3, reflecting medium severity with network attack vector, low complexity, and limited impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time.
Potential Impact
The vulnerability allows remote attackers to cause session expiration, which may disrupt legitimate user sessions. This could lead to denial of service for affected users or force re-authentication. There is no indication of data disclosure, privilege escalation, or system compromise based on the available information.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, monitor for updates from SourceCodester. No specific mitigation steps are provided by the vendor at this time.
CVE-2026-14725: Session Expiration in SourceCodester Online Boat Reservation System
Description
CVE-2026-14725 is a medium severity vulnerability in SourceCodester Online Boat Reservation System version 1.0. It involves a session expiration issue triggered by an unknown functionality, which can be exploited remotely without user interaction. The vulnerability could allow an attacker to manipulate sessions, potentially disrupting user sessions. No official patch or remediation guidance is currently available from the vendor.
CVSS v4.0
Score 5.3medium
Affected software
cpe:2.3:a:sourcecodester:online_boat_reservation_system:*:*:*:*:*:*:*:*AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects SourceCodester Online Boat Reservation System version 1.0 and involves manipulation of an unspecified functionality that leads to session expiration. The attack can be launched remotely without requiring user interaction or elevated privileges. The CVSS 4.0 base score is 5.3, reflecting medium severity with network attack vector, low complexity, and limited impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time.
Potential Impact
The vulnerability allows remote attackers to cause session expiration, which may disrupt legitimate user sessions. This could lead to denial of service for affected users or force re-authentication. There is no indication of data disclosure, privilege escalation, or system compromise based on the available information.
Mitigation Recommendations
Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, monitor for updates from SourceCodester. No specific mitigation steps are provided by the vendor at this time.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- VulDB
- Date Reserved
- 2026-07-04T08:06:32.108Z
- Cvss Version
- 4.0
- State
- PUBLISHED
- Remediation Level
- null
Threat ID: 6a4a109b27e9c797196b2aa6
Added to database: 07/05/2026, 08:06:51 UTC
Last enriched: 07/05/2026, 08:21:22 UTC
Last updated: 07/05/2026, 09:17:06 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.