CVE-2026-86309

A flaw has been found in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/pro_searchfrm.php. This manipulation of the argument ID causes sql injection. The attack can be initiated remotely. The exploit has been published and may be used.

• CWE-74
• CWE-89

• https://github.com/yunfan668/cve/issues/1
• https://itsourcecode.com/
• https://vuldb.com/cve/CVE-2026-86309
• https://vuldb.com/submit/894880
• https://vuldb.com/vuln/399482
• https://vuldb.com/vuln/399482/cti
• https://github.com/yunfan668/cve/issues/1

Published

Sep 7, 2026

Last Modified

Sep 8, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-86303A vulnerability was determined in 92181 markdown up to 058ca…7.3
• CVE-2026-86304MojoX::Authentication versions before 0.006 for Perl allow S…9.8
• CVE-2026-86305A security flaw has been discovered in light0011 cms c774dce…7.3
• CVE-2026-86306A weakness has been identified in light0011 cms c774dce31c6d…7.3
• CVE-2026-86307A security vulnerability has been detected in light0011 cms …4.3
• CVE-2026-86308A vulnerability was detected in light0011 cms c774dce31c6df0…5.3
• CVE-2026-8631A potential security vulnerability has been identified in th…9.8
• CVE-2026-86310A vulnerability has been found in itsourcecode Sales and Inv…6.3
• CVE-2026-86313Out-of-bounds write vulnerability in Samsung Opensource Walr…7.8
• CVE-2026-86314Integer overflow in the source-bounds check in Memory::init(…6.2
• CVE-2026-86315An out-of-bounds write caused by numeric truncation Samsung…6.2
• CVE-2026-86317A vulnerability was detected in ggml-org llama.cpp up to 0.4…5.3