CVE-2026-14725

SourceCodester Online Boat Reservation System session expiration

CVSS 5.3 MEDIUMCWE-613

Vexday Risk Score

10Low

SSVC decision (CISA)

Track

No exploitation signal → monitor

CVSS 5.3EPSS —KEV nãoPoC —Nuclei —Metasploit —Patch —

Lifecycle

05 Jul 2026Published on NVD

Recommendation: Monitor — no exploitation signal at the moment.

A vulnerability was identified in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Affected products

SourceCodester · Online Boat Reservation System

References

https://medium.com/@hemantrajbhati5555/improper-session-invalidation-in-online-boat-reservation-system-using-php-acebd53a8ae7 https://vuldb.com/cve/CVE-2026-14725 https://vuldb.com/submit/847674 https://vuldb.com/vuln/376311 https://vuldb.com/vuln/376311/cti https://www.sourcecodester.com/