CVE-2026-82614

A flaw has been found in itsourcecode Online Medicine Delivery System 1.0. This vulnerability affects the function loadResultList of the file /index.php?q=product of the component Product Category Filter Interface. Executing a manipulation of the argument Category can lead to sql injection. The attack may be launched remotely. The exploit has been published and may be used.

• CWE-74
• CWE-89

• https://github.com/boyslikesports/202607_vul_dir/blob/main/C-05-SQLi-Product-Category_en.md
• https://itsourcecode.com/
• https://vuldb.com/cve/CVE-2026-82614
• https://vuldb.com/submit/892938
• https://vuldb.com/vuln/397115
• https://vuldb.com/vuln/397115/cti

Published

Aug 31, 2026

Last Modified

Sep 1, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-82609A vulnerability was identified in itsourcecode Sales and Inv…6.3
• CVE-2026-8261A vulnerability was determined in Squirrel up to 3.2. This a…5.9
• CVE-2026-82610A security flaw has been discovered in itsourcecode Online M…7.3
• CVE-2026-82611A weakness has been identified in itsourcecode Online Medici…7.3
• CVE-2026-82612A security vulnerability has been detected in itsourcecode O…7.3
• CVE-2026-82613A vulnerability was detected in itsourcecode Online Medicine…7.3
• CVE-2026-82615A vulnerability has been found in itsourcecode Online Medici…7.3
• CVE-2026-82616A vulnerability was found in TOTOLINK NR1800X 9.1.0u.6681_B2…9.9
• CVE-2026-82617The two built-in name-finder patterns exposed by opennlp.too…9.8
• CVE-2026-82618A vulnerability was determined in Systerel S2OPC up to 1.7.3…4.3
• CVE-2026-82619A vulnerability was identified in Systerel S2OPC up to 1.7.3…4.3
• CVE-2026-8262A vulnerability was identified in Devs Palace ERP Online up …2.4