ByteOS Network

NVD Vulnerability Details :

CVE-2026-14690

Received

Source-cna@vuldb.com

Published At-05 Jul, 2026 | 02:17

Updated At-05 Jul, 2026 | 02:17

A weakness has been identified in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This affects the function save_users of the file classes/Users.php. This manipulation causes improper authorization. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Secondary	4.0	5.5	MEDIUM	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Primary	3.1	7.3	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Secondary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

Type: Secondary

Version: 4.0

Base score: 5.5

Base severity: MEDIUM

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Type: Primary

Version: 3.1

Base score: 7.3

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Type: Secondary

Version: 2.0

Base score: 7.5

Base severity: HIGH

Vector:

AV:N/AC:L/Au:N/C:P/I:P/A:P

Weaknesses

CWE ID	Type	Source
CWE-266	Primary	cna@vuldb.com
CWE-285	Primary	cna@vuldb.com

CWE ID: CWE-266

Type: Primary

Source: cna@vuldb.com

CWE ID: CWE-285

Type: Primary

Source: cna@vuldb.com

References

Hyperlink	Source	Resource
https://github.com/lee945/cve/issues/1	cna@vuldb.com	N/A
https://vuldb.com/cve/CVE-2026-14690	cna@vuldb.com	N/A
https://vuldb.com/submit/846830	cna@vuldb.com	N/A
https://vuldb.com/vuln/376286	cna@vuldb.com	N/A
https://vuldb.com/vuln/376286/cti	cna@vuldb.com	N/A
https://www.sourcecodester.com/	cna@vuldb.com	N/A