CVE-2026-82609

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit.php. The manipulation of the argument ID leads to sql injection. It is possible to initiate the attack remotely. The exploit is publicly available and might be used.

  • Published Aug 31, 2026
  • CVSS 2.1 low
  • 0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-82609 at the National Vulnerability Database