CVE-2026-127283
HIGH
NVD
CVSS Score
7.3
Severity
HIGH
Published
Nov 13, 2026
Vendor
unknown
Description
A vulnerability was identified in SourceCodester Food Ordering System 1.0. Affected by this issue is some unknown functionality of the file admin/update_food.php of the component Admin Image Handler. Such manipulation of the argument cmd leads to unrestricted upload. The attack may be performed from remote. The exploit is publicly available and might be used.