CVE records Every CVE as the CVE Program publishes it, refreshed every ten minutes, with NVD's analysis, CISA's known-exploited status and a healthcare tag. Subscribers get the CVEs that match their own systems on My program , by email as they are published. Where the data comes from: sources .
Updated under an hour ago (2026-10-19 12:50 UTC )
This week: 5,501 CVEs published, 360 critical, and 7 newly confirmed exploited. Add your stack to see whether any of them hit you.
Published in the last 7 days 5,501 Show in the list Critical, last 7 days 360 Show in the list Healthcare-tagged, last 7 days 5 Show in the list Known exploited (CISA KEV) 1,747 Show in the list Showing CVEs that name the product itsourcecode:sales_and_inventory_system . Show all products
34 CVEs, showing 1 to 34
CVE Severity Title Published CVE-2026-78171 High 7.3 itsourcecode Sales and Inventory System processlogin.php sql injection Assigned by VulDB
Aug 24, 2026 CVE-2026-78185 Medium 6.3 itsourcecode Sales and Inventory System cust_edit.php sql injection Assigned by VulDB
Aug 24, 2026 CVE-2026-78656 Medium 6.3 itsourcecode Sales and Inventory System cust_del.php sql injection Assigned by VulDB
Aug 25, 2026 CVE-2026-82421 Medium 6.3 itsourcecode Sales and Inventory System emp_edit.php sql injection Assigned by VulDB
Aug 29, 2026 CVE-2026-82422 Medium 6.3 itsourcecode Sales and Inventory System emp_del.php sql injection Assigned by VulDB
Aug 29, 2026 CVE-2026-82484 Medium 6.3 itsourcecode Sales and Inventory System emp_searchfrm.php sql injection Assigned by VulDB
Aug 30, 2026 CVE-2026-82485 Medium 6.3 itsourcecode Sales and Inventory System pro_edit.php sql injection Assigned by VulDB
Aug 30, 2026 CVE-2026-82540 Medium 6.3 itsourcecode Sales and Inventory System cust_searchfrm.php sql injection Assigned by VulDB
Aug 30, 2026 CVE-2026-82541 Medium 6.3 itsourcecode Sales and Inventory System sup_edit.php sql injection Assigned by VulDB
Aug 30, 2026 CVE-2026-82545 Medium 6.3 itsourcecode Sales and Inventory System sup_searchfrm.php sql injection Assigned by VulDB
Aug 30, 2026 CVE-2026-82609 Medium 6.3 itsourcecode Sales and Inventory System inv_edit.php sql injection Assigned by VulDB
Aug 31, 2026 CVE-2026-82696 Medium 6.3 itsourcecode Sales and Inventory System inv_searchfrm.php sql injection Assigned by VulDB
Aug 31, 2026 CVE-2026-85383 Medium 6.3 itsourcecode Sales and Inventory System inv_del.php sql injection Assigned by VulDB
Sep 4, 2026 CVE-2026-86163 Medium 6.3 itsourcecode Sales and Inventory System pro_del.php sql injection Assigned by VulDB
Sep 6, 2026 CVE-2026-86164 Medium 6.3 itsourcecode Sales and Inventory System trans_view.php sql injection Assigned by VulDB
Sep 6, 2026 CVE-2026-86232 Medium 6.3 itsourcecode Sales and Inventory System sup_del.php sql injection Assigned by VulDB
Sep 6, 2026 CVE-2026-86233 Medium 6.3 itsourcecode Sales and Inventory System us_del.php sql injection Assigned by VulDB
Sep 6, 2026 CVE-2026-86234 Medium 6.3 itsourcecode Sales and Inventory System cust_transac.php add sql injection Assigned by VulDB
Sep 6, 2026 CVE-2026-86235 Medium 6.3 itsourcecode Sales and Inventory System pos_transac.php add sql injection Assigned by VulDB
Sep 6, 2026 CVE-2026-86236 Medium 6.3 itsourcecode Sales and Inventory System pro_transac.php add sql injection Assigned by VulDB
Sep 7, 2026 CVE-2026-86245 Medium 6.3 itsourcecode Sales and Inventory System sup_transac.php sql injection Assigned by VulDB
Sep 7, 2026 CVE-2026-86265 Medium 6.3 itsourcecode Sales and Inventory System us_transac.php sql injection Assigned by VulDB
Sep 7, 2026 CVE-2026-86269 Medium 6.3 itsourcecode Sales and Inventory System emp_edit1.php sql injection Assigned by VulDB
Sep 7, 2026 CVE-2026-86270 Medium 6.3 itsourcecode Sales and Inventory System settings_edit.php sql injection Assigned by VulDB
Sep 7, 2026 CVE-2026-86291 Medium 6.3 itsourcecode Sales and Inventory System us_edit1.php sql injection Assigned by VulDB
Sep 7, 2026 CVE-2026-86309 Medium 6.3 itsourcecode Sales and Inventory System pro_searchfrm.php sql injection Assigned by VulDB
Sep 7, 2026 CVE-2026-86310 Medium 6.3 itsourcecode Sales and Inventory System cust_edit1.php sql injection Assigned by VulDB
Sep 7, 2026 CVE-2026-86517 Medium 6.3 itsourcecode Sales and Inventory System us_searchfrm.php mysqli_query sql injection Assigned by VulDB
Sep 8, 2026 CVE-2026-86675 Medium 6.3 itsourcecode Sales and Inventory System us_edit.php sql injection Assigned by VulDB
Sep 8, 2026 CVE-2026-90525 Medium 6.3 itsourcecode Sales and Inventory System cust_pos_trans.php sql injection Assigned by VulDB
Sep 13, 2026 CVE-2026-90574 Medium 6.3 itsourcecode Sales and Inventory System emp_transac.php add sql injection Assigned by VulDB
Sep 13, 2026 CVE-2026-90597 Medium 6.3 itsourcecode Sales and Inventory System sup_edit1.php sql injection Assigned by VulDB
Sep 13, 2026 CVE-2026-90600 Medium 6.3 itsourcecode Sales and Inventory System inv_edit1.php sql injection Assigned by VulDB
Sep 13, 2026 CVE-2026-90700 Medium 6.3 itsourcecode Sales and Inventory System pro_edit1.php sql injection Assigned by VulDB
Sep 14, 2026
CVSS is the assigning CNA's score where it gives one, otherwise NVD's. The healthcare tag is a documented heuristic (a list of clinical and health IT vendors, and clinical terms in the description), not a classification. The CVE record is authoritative.
© 2026 MTC Group, LLC. All rights reserved. InfoSec Signals™ and the InfoSec Signals logo are trademarks of MTC Group, LLC.
Printed from infosec-signals.mtcgroupllc.com. Every record links back to the agency that published it.
