CVE-2026-105704High· 7.3▾ MidnightPoC availableA vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument user_id leads to improper authentication. The attack can be …
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 40.2 · likelihood 0.1 · exploitation 12
A public proof-of-concept already exists for this vulnerability — see Exploit availability below.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Exploit / PoC code exists
0.4%
A vulnerability was identified in SourceCodester Drug Recommendation System 1.0. This affects an unknown function of the component Auth Guard. Such manipulation of the argument user_id leads to improper authentication. The attack can be executed remotely. The exploit is publicly available and might be used.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116604Medium· 6.5SourceCodester Online Food Ordering System delete_admin.php missing authentication
CVE-2026-108972High· 7.3A vulnerability was found in SourceCodester Human Resource Management System 1.0
CVE-2026-108920Medium· 4.3A security vulnerability has been detected in SourceCodester Drug Recommendation System 1.0
CVE-2026-108919Medium· 4.3A weakness has been identified in SourceCodester Drug Recommendation System 1.0
CVE-2026-105706Medium· 4.3A weakness has been identified in SourceCodester Drug Recommendation System 1.0
CVE-2026-105705Medium· 4.3A security flaw has been discovered in SourceCodester Drug Recommendation System 1.0