CVE-2026-30576

A Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in the add-stock.php file. The application fails to validate the "txtprice" and "txttotalcost" parameters during stock entry, allowing negative financial values to be submitted. This leads to corruption of financial records, allowing attackers to manipulate inventory asset values and procurement costs.

• CWE-20

• https://github.com/meifukun/Web-Security-PoCs/blob/main/Pharmacy-Product-Management-System/Logic-AddStock-NegativePrice.mdExploit, Third Party Advisory

Published

Mar 27, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-3057A security flaw has been discovered in a54552239 pearProject…9.8
• CVE-2026-30570A Reflected Cross-Site Scripting (XSS) vulnerability exists …6.1
• CVE-2026-30571A Reflected Cross-Site Scripting (XSS) vulnerability exists …6.1
• CVE-2026-30573A Business Logic vulnerability exists in SourceCodester Phar…7.5
• CVE-2026-30574A Business Logic vulnerability exists in SourceCodester Phar…7.5
• CVE-2026-30575A Business Logic vulnerability exists in SourceCodester Phar…7.5
• CVE-2026-30578File Thinghie 2.5.7 is vulnerable to Cross Site Scripting (X…6.5
• CVE-2026-30579File Thingie 2.5.7 is vulnerable to Cross Site Scripting (XS…6.5
• CVE-2026-3058The Seraphinite Accelerator plugin for WordPress is vulnerab…6.5
• CVE-2026-30580File Thingie 2.5.7 is vulnerable to Directory Traversal. A m…4.3
• CVE-2026-30586Cross Site Scripting vulnerability in usememos Memos v.0.26.…6.1
• CVE-2026-30587Multiple Stored XSS vulnerabilities exist in Seafile Server …8.7