CVE-2026-116603

MEDIUM 4.7CVE-2026-116603 · Published 27/10/2026 · updated 02/11/2026

In short

CVE-2026-116603 is a MEDIUM (CVSS 4.7) vulnerability.
Chance of exploitation in the next 30 days (EPSS): 0.29%, higher than 22.1% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
—	No affected product versions are listed for this vulnerability yet.

Description

A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admin/add_food.php. Executing a manipulation of the argument image can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may be used.

References

CyberShailendra/SourceCodesterUnrestrictedFileUploadLeadingtoRemoteCode-Execution
vuldb.com/cve/CVE-2026-116603
vuldb.com/submit/1022954
vuldb.com/vuln/426509
vuldb.com/vuln/426509/cti
sourcecodester.com

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free