ByteOS Network

CVE Vulnerability Details :

CVE-2026-14622

PUBLISHED

More Info Official Page

Assigner-VulDB

Assigner Org ID-1af790b2-7ee1-4545-860a-a788eba489b5

Published At-04 Jul, 2026 | 08:45

Updated At-04 Jul, 2026 | 08:45

▼CVE Numbering Authority (CNA)

jairiidriss restaurant-website-php-mysql AJAX Endpoint ajax_files missing authentication

A vulnerability was found in jairiidriss restaurant-website-php-mysql up to 521428b5b612449df0cf4a5d15ee40cba67f3d35. This vulnerability affects unknown code of the file /admin/ajax_files of the component AJAX Endpoint. Performing a manipulation results in missing authentication. The attack is possible to be carried out remotely. The exploit has been made public and could be used. This product adopts a rolling release strategy to maintain continuous delivery. Therefore, version details for affected or updated releases cannot be specified. The project was informed of the problem early through an issue report but has not responded yet.

Affected Products

Vendor

jairiidriss

Product

restaurant-website-php-mysql

CPEs

cpe:2.3:a:jairiidriss:restaurant-website-php-mysql:*:*:*:*:*:*:*:*

Modules

AJAX Endpoint

Versions

Affected

521428b5b612449df0cf4a5d15ee40cba67f3d35

Problem Types

Type	CWE ID	Description
CWE	CWE-306	Missing Authentication
CWE	CWE-287	Improper Authentication

Type: CWE

CWE ID: CWE-306

Description: Missing Authentication

Type: CWE

CWE ID: CWE-287

Description: Improper Authentication

Metrics

Version	Base score	Base severity	Vector
4.0	6.9	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
3.1	7.3	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
3.0	7.3	HIGH	CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R
2.0	7.5	N/A	AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR

Version: 4.0

Base score: 6.9

Base severity: MEDIUM

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Version: 3.1

Base score: 7.3

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Version: 3.0

Base score: 7.3

Base severity: HIGH

Vector:

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R

Version: 2.0

Base score: 7.5

Base severity: N/A

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR

Credits

reporter

Fklov (VulDB User)

coordinator

VulDB CNA Team

Timeline

Event	Date
Advisory disclosed	2026-07-03 00:00:00
VulDB entry created	2026-07-03 02:00:00
VulDB entry last update	2026-07-03 19:00:31

Event: Advisory disclosed

Date: 2026-07-03 00:00:00

Event: VulDB entry created

Date: 2026-07-03 02:00:00

Event: VulDB entry last update

Date: 2026-07-03 19:00:31

References

Hyperlink	Resource
https://vuldb.com/vuln/376138	vdb-entry
https://vuldb.com/vuln/376138/cti	signature permissions-required
https://vuldb.com/cve/CVE-2026-14622	third-party-advisory
https://vuldb.com/submit/845099	third-party-advisory
https://github.com/jairiidriss/restaurant-website-php-mysql/issues/6	exploit issue-tracking
https://github.com/jairiidriss/restaurant-website-php-mysql/	product