VulnerabilityDeferred

CVE-2026-14725

A vulnerability was identified in SourceCodester Online Boat Reservation System 1.0.

LOW 2.1EPSS 0.37%

Does this matter?

Lower severity and a low EPSS score (0.37%). Track it; it rarely justifies an emergency change on its own.

Description

A vulnerability was identified in SourceCodester Online Boat Reservation System 1.0. Affected by this vulnerability is an unknown functionality. Such manipulation leads to session expiration. It is possible to launch the attack remotely. The exploit is publicly available and might be used.

CVSS 4.0: 2.1 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
EPSS: 0.37% probability · 30th percentile
CISA KEV: Not listed
Weakness: CWE-613
Source: cna@vuldb.com

References

https://medium.com/@hemantrajbhati5555/improper-session-invalidation-in-online-boat-reservation-system-using-php-acebd53a8ae7
https://vuldb.com/cve/CVE-2026-14725
https://vuldb.com/submit/847674
https://vuldb.com/vuln/376311
https://vuldb.com/vuln/376311/cti
https://www.sourcecodester.com/

Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.