CVE-2026-14690

Name of the Vulnerable Software and Affected Versions SourceCodester Multi-Vendor Online Grocery Management System version 1.0

Description An improper authorization issue exists in the save users() function within the classes/Users.php file. This flaw allows for remote exploitation, enabling an attacker to bypass authorization controls.

Recommendations As a temporary workaround, restrict access to the save users() function in the classes/Users.php file until a fix is applied. At the moment, there is no information about a newer version that contains a fix for this vulnerability.