LeakyCreds
NewInstant webhook alerts now available — notified within seconds of any credential detection.Learn more →

CVE-2026-3137 - Vulnerability Analysis

MediumCVSS: 5.3

Last Updated: February 25, 2026

CodeAstro Food Ordering System - Buffer Overflow

Published: February 25, 2026Updated: February 25, 2026PoC Available

Overview

CodeAstro Food Ordering System 1.0 contains a stack-based buffer overflow caused by manipulation in food_ordering.exe, letting local attackers execute arbitrary code, exploit requires local access.

Severity & Score

Severity: Medium
CVSS Score: 5.3

Impact

Local attackers can execute arbitrary code, potentially leading to full system compromise.

Mitigation

Update to the latest version.

Details

CVE ID
CVE-2026-3137
Severity
Medium
CVSS Score
5.3
Type
buffer_overflow
Status
confirmed

CWE

  • CWE-119
  • CWE-787

CVSS Metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L