CVE detail
CVE-2026-14691
A security vulnerability has been detected in SourceCodester Multi-Vendor Online Grocery Management System 1.0. This impacts the function update_settings_info of the file classes/SystemSettings.php of the component Setting Handler. Such manipulation of the argument content[] leads to code injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used.
Buzz score
Why this CVE is surfacing
This all-time snapshot uses the same composite formula as Trending across a 30-year evidence window, rather than a current rolling window.
Buzz score components · mention 19.5 · diversity 11.5 · KEV 0.0 · OTX 0.0 · PoC 0.0
Why it matters now
Mention timeline
- Total mentions
- 6
- within the 30d window
- Peak daily
- 6
- highest bucket
Evidence
Source links by recency
6 source links · newest first
- https://www.sourcecodester.com/www.sourcecodester.com
No excerpt available.
Third Party Advisorywww.sourcecodester.comJul 5, 2026, 2:17 AM - https://vuldb.com/vuln/376287/ctivuldb.com
No excerpt available.
Exploitvuldb.comJul 5, 2026, 2:17 AM - https://vuldb.com/vuln/376287vuldb.com
No excerpt available.
Exploitvuldb.comJul 5, 2026, 2:17 AM - https://vuldb.com/submit/846831vuldb.com
No excerpt available.
Exploitvuldb.comJul 5, 2026, 2:17 AM - https://vuldb.com/cve/CVE-2026-14691vuldb.com
No excerpt available.
Exploitvuldb.comJul 5, 2026, 2:17 AM - https://github.com/lee945/cve/issues/2github.com
No excerpt available.
Exploitgithub.comJul 5, 2026, 2:17 AM
Exploit code
Public exploit repository references
Public PoC repositories are third-party, potentially unsafe artifacts. Treat their code as untrusted and use it only on authorized systems in an isolated, least-privilege environment. cvebuzz does not execute the code or verify that an exploit works.
0 repository references · best confidence N/A · max 0 stars
Related records
Similar CVEs
6 related CVEs with shared weakness or product evidence
- CVE-2026-16204CVSS 2.1 · Low
A security flaw has been discovered in zevorn rt-claw up to 0.2.0. This affects the function tool_run_script_execute of the file claw/services/tools/script.c of the component Tele…
- CVE-2026-15533CVSS 2.0 · Low
A security flaw has been discovered in DedeCMS 5.7.118. Impacted is an unknown function of the file /plus/search.php of the component Column Management. Performing a manipulation…
- CVE-2026-15512CVSS 2.1 · Low
A vulnerability was identified in pig-mesh Pig up to 3.9.2. Affected by this issue is some unknown functionality of the file \pig-master\pig-visual\pig-codegen\src\main\java\com\p…
- CVE-2026-15497CVSS 5.5 · Medium
A vulnerability was determined in SonicCloudOrg sonic-agent up to 2.7.2. This affects an unknown function of the file sonic-server-controller/src/main/java/org/cloud/sonic/control…
- CVE-2026-14749CVSS 5.5 · Medium
A vulnerability was identified in mjperpinosa stumasy up to 327d1b0f2915ba79d7ef8ebb74553e987609d9be. Impacted is the function eval of the file application/pages/imba_calculator/c…
- CVE-2026-14722CVSS 5.5 · Medium
A vulnerability was found in tiddly-gittly TidGi-Desktop up to 0.13.0. This impacts an unknown function of the file src/services/wiki/wikiWorker/loadWikiTiddlersWithSubWikis.ts of…