CVE-2026-10295: Sourcecodester Customer Review App

Low severity, CVSS 3.3. EPSS: 0.1% chance of exploitation in the next 30 days.

A vulnerability was found in SourceCodester Customer Review App 1.0. Affected by this vulnerability is the function add_review/save_review/get_all_reviews of the file review_app.py. Performing a manipulation of the argument name/comment results in denial of service. The attack requires a local approach. The exploit has been made public and could be used.

Affected products

Published 2026-06-01. Last modified 2026-07-22.