What’s Vulnerable › Vulnerabilities

CVE-2026-10295: SourceCodester Customer Review App review_app.py get_all_reviews denial of service

• Severity: low (CVSS 3.3 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.1% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2026-06-01 · updated 2026-07-22
• Weakness: CWE-404

Description

A vulnerability was found in SourceCodester Customer Review App 1.0. Affected by this vulnerability is the function add_review/save_review/get_all_reviews of the file review_app.py. Performing a manipulation of the argument name/comment results in denial of service. The attack requires a local approach. The exploit has been made public and could be used.

Affected products

• SourceCodester Customer Review App: 1.0

References

• https://pastebin.com/Ud5vaGp6
• https://vuldb.com/cve/CVE-2026-10295
• https://vuldb.com/submit/826530
• https://vuldb.com/vuln/367588
• https://vuldb.com/vuln/367588/cti
• https://www.sourcecodester.com/

Get alerted when CVE-2026-10295 or the next vulnerability affects your stack