CVE-2026-14725

SourceCodester Online Boat Reservation System session expiration

CVSS 5.3 MEDIUMEPSS 0.2%CWE-613

Vexday Risk Score

13Baixo

Decisão SSVC (CISA)

Track

Sem sinal de exploração → monitorar

CVSS 5.3EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —

Ciclo de vida

05 jul 2026Publicada no NVD

Recomendação: Monitorar — sem sinal de exploração no momento.

A vulnerability was identified in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P

Produtos afetados

SourceCodester · Online Boat Reservation System

Referências

https://medium.com/@hemantrajbhati5555/improper-session-invalidation-in-online-boat-reservation-system-using-php-acebd53a8ae7 https://vuldb.com/cve/CVE-2026-14725 https://vuldb.com/submit/847674 https://vuldb.com/vuln/376311 https://vuldb.com/vuln/376311/cti https://www.sourcecodester.com/