CVE-2026-14693 in Multi-Vendor Online Grocery Management System

Prediction

by VulDB Data Team • 07/04/2026

A flaw has been found in SourceCodester Multi-Vendor Online Grocery Management System 1.0. Affected by this vulnerability is the function cancel_order of the file classes/Master.php. Executing a manipulation can lead to improper authorization. The attack may be performed from remote. The exploit has been published and may be used.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

• Responsible: VulDB
• Moderation: accepted
• Entry: VDB-376289
• CPE: ready
• CWE: CWE-285 (confirmed)
• Exploit: Download
• CVSS: 5.4 (VulDB)
• EPSS: 0.00000
• KEV: no
• Activities: low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2026-14693
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2026-14693
• CVE Details: https://www.cvedetails.com/cve/CVE-2026-14693/