Ghostwire

CVE-2026-16226: A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_settings...

MEDIUM CVSS 4.7 Exploit Available

Published: July 19, 2026 | Last Modified: July 19, 2026

Description

A weakness has been identified in SourceCodester Pizzafy Ecommerce System 1.0. This affects the function save_settings of the file /admin/admin_class_novo.php. This manipulation of the argument img causes unrestricted upload. The attack is possible to be carried out remotely.

Ghostwire Analysis — What This Means Practically

Medium CVSS score indicates moderate risk — exploitation requires specific conditions or results in limited impact.
Exploit code is reported to be available, increasing the likelihood of active exploitation.

This analysis is generated by Ghostwire from NVD, CISA KEV, EPSS, and open-source intelligence data. Verify findings through primary sources before acting.

References

vuldb.com/cve/CVE-2026-16226
vuldb.com/submit/858229
vuldb.com/vuln/380048
vuldb.com/vuln/380048/cti
www.sourcecodester.com/
www.tenable.com/cve/CVE-2026-16226
www.cnnvd.org.cn/home/globalSearch?keyword=CVE-2026-16226