Reference page — cumulative record through Wednesday, October 7, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2026-105171

CVE-2026-105171LOW

kishor-23 food-waste-management-system Role Attribute admin.php authorization

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0022   11.4     —

AFFECTED
  Product                       Versions                                    Fixed
  food-waste-management-system  411989e3ecb82895e53dca7865f72145f03d7d93 –  —

TIMELINE
  Oct 4   Reserved by VulDB
  Oct 4   Published (CNA: VulDB)
  Oct 5   RESCORED — CVE-2026-105171 (kishor-23 food-waste-management-system). CVSS 5.3 → 2.1 (NVD).

CWE-285, CWE-639 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred

Description

A security vulnerability has been detected in kishor-23 food-waste-management-system 411989e3ecb82895e53dca7865f72145f03d7d93/b3a70b2c492dc9904de5be1ad9389bd79b87f82c. Affected by this vulnerability is an unknown functionality of the file admin/admin.php of the component Role Attribute Handler. Such manipulation of the argument Name leads to authorization bypass. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. This product does not use versioning. This is why information about affected and unaffected releases are unavailable. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
October 4, 2026	Reserved	Reserved by VulDB
October 4, 2026	Published	Published (CNA: VulDB)
October 5, 2026	RESCORED	RESCORED — CVE-2026-105171 (kishor-23 food-waste-management-system). CVSS 5.3 → 2.1 (NVD).

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
kishor-23	food-waste-management-system	—	411989e3ecb82895e53dca7865f72145f03d7d93	—

Weaknesses

CWE-285 · CWE-639

References (6)

Authoritative record: CVE-2026-105171 at cve.org

Vendors: kishor-23

Weaknesses: CWE-285 · CWE-639

About this page

This is a reference page, not a dated page of record. It assembles the complete lifecycle of CVE-2026-105171 from the CVE Program record, NVD enrichment, the CISA KEV catalog, EPSS, and OSV advisories. The box score's numbers (CVSS, EPSS, KEV status) are current as of Wednesday, October 7, 2026 UTC and are re-derived as the archive grows; only dated daily editions are immutable pages of record. The authoritative source for this identifier is cve.org.