CVE-2026-90597

A security vulnerability has been detected in itsourcecode Sales and Inventory System 1.0. The affected element is an unknown function of the file /pages/sup_edit1.php. Such manipulation of the argument ID leads to sql injection. The attack may be performed from remote. The exploit has been disclosed publicly and may be used.

  • Published Sep 13, 2026
  • CVSS 2.1 low
  • 0.3% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-90597 at the National Vulnerability Database