CVE-2026-86236

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/pro_transac.php?action=add. Such manipulation of the argument Name leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

  • Published Sep 7, 2026
  • CVSS 2.1 low
  • 0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-86236 at the National Vulnerability Database