Is CVE-2026-116603 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-116603?

CVE-2026-116603 has a CVSS v3 severity of MEDIUM (4.7).

Back

CVE-2026-116603

Description

A flaw has been found in SourceCodester Online Food Ordering System 1.0. Impacted is an unknown function of the file admin/add_food.php. Executing a manipulation of the argument image can lead to unrestricted upload. The attack may be performed from remote. The exploit has been published and may be used.