HIGHCVSS v3.1 7.3Vulnerability
CVE-2026-127283
A vulnerability was identified in SourceCodester Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file admin/update_food.php of the component Admin Image Handler. Such manipulation of the argument cmd leads to unrestricted upload. The attack may be performed from remote. The exploit is publicly available and might be used.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-14T00:40:25.638091+00:00
- Epss score
- 0.00288
- Cvss severity
- HIGH
- Cvss score
- 7.3
- Retrieved at
- 2026-11-14T00:51:03+00:00
- Last source
- FIRST EPSS
- Score
- 7.3
- Cvss version
- 3.1
- Cve id
- CVE-2026-127283
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- First seen by Signal
- 2026-11-13T04:09:07+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
- Published at
- 2026-11-13T02:18:55.487
- Last modified
- 2026-11-13T02:18:55.633
- Epss percentile
- 0.21613
Related Entities (2)
HAS_WEAKNESS (2)
Related research
Explore deeper with Ninja Signal's threat intelligence graph