CVE-2026-14725

SourceCodester Online Boat Reservation System session expiration

CVSS 5.3 MEDIUMEPSS 0.2%CWE-613

Vexday Risk Score

13Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS 5.3EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

05 jul 2026Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

A vulnerability was identified in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Productos afectados

SourceCodester · Online Boat Reservation System

Referencias

https://medium.com/@hemantrajbhati5555/improper-session-invalidation-in-online-boat-reservation-system-using-php-acebd53a8ae7 https://vuldb.com/cve/CVE-2026-14725 https://vuldb.com/submit/847674 https://vuldb.com/vuln/376311 https://vuldb.com/vuln/376311/cti https://www.sourcecodester.com/