PT-2026-55753 · Sourcecodester · Multi-Vendor Online Groceries Management System

Chr1S · Published 2026-07-05 · Updated 2026-07-05 · CVE-2026-14690

NVD

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save users of the file classes/Users.php. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

Exploit

Fix

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2026-14690

Affected Products

Multi-Vendor Online Groceries Management System

References · 7

• 🔥 https://github.com/lee945/cve/issues/1 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-14690 · Security Note
• https://vuldb.com/vuln/376286 · Note
• https://vuldb.com/cve/CVE-2026-14690 · Note
• https://sourcecodester.com · Note
• https://vuldb.com/vuln/376286/cti · Note
• https://vuldb.com/submit/846830 · Note