Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
2.1

Food-waste-management-system admin.php allows unauthorized access

CVE-2026-105171 · published 14 days ago
Summary

The admin.php file in the Food-waste-management-system can be tricked into granting access without proper permission. Attackers can do this from anywhere on the internet, potentially seeing or changing data they shouldn't. Apply the vendor's fix as soon as it becomes available or limit access to the admin page through network controls.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93
Original advisory text
kishor-23 food-waste-management-system Role Attribute admin.php authorization
A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler. Such manipulation of the argument Name leads to authorization bypass. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit
  • Gives an attacker partial control
Severity
2.1 Low
Exploitation
<1% chance of attack within 30 days
Type
CWE-285Improper Authorization
CWE-639Authorization Bypass Through User-Controlled Key
Timeline
Published5 Oct 2026
Updated14 Oct 2026
First seen5 Oct 2026
Sources
CVE-2026-105171 · NVD
CVE-2026-105171 · MITRE
CVE-2026-105171 · OSV
Track software like this
Free during beta