CVE-2026-105170

{
  "etk_id": "ETK-2026-609",
  "cve_id": "CVE-2026-105170",
  "display_id": "CVE-2026-105170",
  "ghsa_id": "GHSA-mq3p-xwm2-v3hc",
  "euvd_id": "EUVD-2026-92146",
  "status": "published",
  "anchor_state": "anchored",
  "title": "Authentication bypass in food-waste-management-system admin signup",
  "summary": "The Admin Signup endpoint in food-waste-management-system is affected in the reported revisions. A remote attacker may bypass expected authentication when the admin/signup.php endpoint is reachable.",
  "mitigation": "Restrict access to admin/signup.php to trusted administrators or internal networks, and disable public admin signup if it is not required. Review the affected code and apply an upstream correction when one is published.",
  "vendor": "kishor-23",
  "product": "food-waste-management-system",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "411989e3ecb82895e53dca7865f72145f03d7d93",
        "b3a70b2c492dc9904de5be1ad9389bd79b87f82c"
      ],
      "ecosystem": null,
      "fixed_versions": [],
      "package_name": "food-waste-management-system",
      "purl": null
    }
  ],
  "cwes": null,
  "cvss_score": 7.3,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L",
  "epss_score": 0.004,
  "epss_percentile": 0.3249,
  "epss_asof": "2026-10-20",
  "automation": "deterministic",
  "check": false,
  "check_confidence_basis": null,
  "exploit": false,
  "pipeline_minutes": 21.883568266666668,
  "t0_at": "2026-10-04T23:30:12.666000+00:00",
  "signals": {
    "public_poc": {
      "at": "2026-10-04T23:30:12.666000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-04T23:30:12.666000+00:00",
      "url": "https://github.com/kishor-23/food-waste-management-system/issues/10"
    },
    "trigger_signal": {
      "at": "2026-10-04T23:30:12.666000+00:00",
      "days": 0,
      "is_lower_bound": false,
      "measured_at": "2026-10-04T23:30:12.666000+00:00",
      "url": "https://github.com/advisories/GHSA-mq3p-xwm2-v3hc"
    }
  }
}