CVE-2026-10694

HighCVSS 7.3

Published: 03/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

A vulnerability in SourceCodester Online Food Ordering System 2.0. The include function in /index.php allows remote file inclusion via manipulation of the page argument. The attack can be launched remotely and the exploit is public.

Risk Assessment

Risk of remote code execution and server compromise.

Recommendation

Immediately update the system or apply security patches; consider disabling unnecessary features.

Other vulnerabilities in SourceCodester Online Food Ordering System

CVE-2026-5811Medium
A vulnerability exists in SourceCodester Online Food Ordering System 1.0 in the save_product function of /Actions.php in the POST Parameter Handler component. Manipulation of the price argument leads to business logic errors. The attack may be performed remotely. The exploit is publicly available and might be used.

Original NVD description (English source)

A vulnerability was detected in SourceCodester Online Food Ordering System 2.0. Affected by this issue is the function include of the file /index.php. The manipulation of the argument page results in file inclusion. The attack can be launched remotely. The exploit is now public and may be used.