CVE-2026-3137 - Vulnerability Analysis
MediumCVSS: 5.3Last Updated: February 25, 2026
CodeAstro Food Ordering System - Buffer Overflow
Published: February 25, 2026Updated: February 25, 2026PoC Available
Overview
CodeAstro Food Ordering System 1.0 contains a stack-based buffer overflow caused by manipulation in food_ordering.exe, letting local attackers execute arbitrary code, exploit requires local access.
Severity & Score
Severity: Medium
CVSS Score: 5.3
Impact
Local attackers can execute arbitrary code, potentially leading to full system compromise.
Mitigation
Update to the latest version.
References
Related Resources
Details
- CVE ID
- CVE-2026-3137
- Severity
- Medium
- CVSS Score
- 5.3
- Type
- buffer_overflow
- Status
- confirmed
CWE
- CWE-119
- CWE-787
CVSS Metrics
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L