{"id":"CVE-2026-86675","title":"A vulnerability was identified in itsourcecode Sales and Inventory System 1.0","summary":"A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/us_edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely.…","severity":"medium","cvss":6.3,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","cwe":["CWE-74","CWE-89"],"vendor":"itsourcecode","product":"Sales and Inventory System","affected":["sales_and_inventory_system 1.0"],"published":"2026-09-08","updated":"2026-09-10","sourceUpdated":"2026-09-10T18:18:10.317","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-86675","references":[{"url":"https://github.com/ltranquility/submit_repository/issues/12","label":"cna@vuldb.com"},{"url":"https://itsourcecode.com/","label":"cna@vuldb.com"},{"url":"https://vuldb.com/cve/CVE-2026-86675","label":"cna@vuldb.com"},{"url":"https://vuldb.com/submit/909979","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399765","label":"cna@vuldb.com"},{"url":"https://vuldb.com/vuln/399765/cti","label":"cna@vuldb.com"}],"tags":["nvd","cve.org","exploit-available"],"exploitAvailable":true,"ssvc":{"exploitation":"poc","automatable":"no","technicalImpact":"partial","timestamp":"2026-09-10T17:49:38.056029Z"},"epss":0.00204,"epssPercentile":0.10718,"ingestedAt":"2026-09-08T19:08:49.638Z","slug":"CVE-2026-86675","body":"## Overview\n\nA vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This affects an unknown part of the file /pages/us_edit.php. Such manipulation of the argument ID leads to sql injection. The attack may be launched remotely. The exploit is publicly available and might be used.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"twilight","depthScore":47,"depthScoreParts":{"impact":34.7,"likelihood":0,"exploitation":12,"ransomware":0},"changes":[{"seq":202151,"id":"CVE-2026-86675","ts":1789400063962,"field":"exploit_available","old":"false","new":"true"},{"seq":200878,"id":"CVE-2026-86675","ts":1789397617835,"field":"exploit_available","old":"true","new":"false"},{"seq":199571,"id":"CVE-2026-86675","ts":1789395539449,"field":"exploit_available","old":"false","new":"true"},{"seq":198816,"id":"CVE-2026-86675","ts":1789392245752,"field":"exploit_available","old":"true","new":"false"},{"seq":197149,"id":"CVE-2026-86675","ts":1789384295128,"field":"exploit_available","old":"false","new":"true"},{"seq":196423,"id":"CVE-2026-86675","ts":1789383757423,"field":"exploit_available","old":"true","new":"false"},{"seq":195327,"id":"CVE-2026-86675","ts":1789380575829,"field":"exploit_available","old":"false","new":"true"},{"seq":194278,"id":"CVE-2026-86675","ts":1789378784450,"field":"exploit_available","old":"true","new":"false"},{"seq":193065,"id":"CVE-2026-86675","ts":1789376518998,"field":"exploit_available","old":"false","new":"true"},{"seq":191852,"id":"CVE-2026-86675","ts":1789373632587,"field":"exploit_available","old":"true","new":"false"},{"seq":190637,"id":"CVE-2026-86675","ts":1789369485292,"field":"exploit_available","old":"false","new":"true"},{"seq":189424,"id":"CVE-2026-86675","ts":1789368442981,"field":"exploit_available","old":"true","new":"false"},{"seq":188207,"id":"CVE-2026-86675","ts":1789365234970,"field":"exploit_available","old":"false","new":"true"},{"seq":186994,"id":"CVE-2026-86675","ts":1789363472685,"field":"exploit_available","old":"true","new":"false"},{"seq":185780,"id":"CVE-2026-86675","ts":1789361233604,"field":"exploit_available","old":"false","new":"true"},{"seq":184567,"id":"CVE-2026-86675","ts":1789358365298,"field":"exploit_available","old":"true","new":"false"},{"seq":182817,"id":"CVE-2026-86675","ts":1789354319370,"field":"exploit_available","old":"false","new":"true"},{"seq":181610,"id":"CVE-2026-86675","ts":1789353319136,"field":"exploit_available","old":"true","new":"false"},{"seq":180403,"id":"CVE-2026-86675","ts":1789350286182,"field":"exploit_available","old":"false","new":"true"},{"seq":179196,"id":"CVE-2026-86675","ts":1789348294325,"field":"exploit_available","old":"true","new":"false"},{"seq":177989,"id":"CVE-2026-86675","ts":1789346372651,"field":"exploit_available","old":"false","new":"true"},{"seq":176782,"id":"CVE-2026-86675","ts":1789343185912,"field":"exploit_available","old":"true","new":"false"},{"seq":174899,"id":"CVE-2026-86675","ts":1789334877072,"field":"exploit_available","old":"false","new":"true"},{"seq":173694,"id":"CVE-2026-86675","ts":1789333702210,"field":"exploit_available","old":"true","new":"false"},{"seq":172508,"id":"CVE-2026-86675","ts":1789331094468,"field":"exploit_available","old":"false","new":"true"},{"seq":171322,"id":"CVE-2026-86675","ts":1789328782290,"field":"exploit_available","old":"true","new":"false"},{"seq":170117,"id":"CVE-2026-86675","ts":1789327198555,"field":"exploit_available","old":"false","new":"true"},{"seq":168912,"id":"CVE-2026-86675","ts":1789323841663,"field":"exploit_available","old":"true","new":"false"},{"seq":167707,"id":"CVE-2026-86675","ts":1789319704222,"field":"exploit_available","old":"false","new":"true"},{"seq":166502,"id":"CVE-2026-86675","ts":1789318777580,"field":"exploit_available","old":"true","new":"false"},{"seq":165297,"id":"CVE-2026-86675","ts":1789315806440,"field":"exploit_available","old":"false","new":"true"},{"seq":164092,"id":"CVE-2026-86675","ts":1789313635654,"field":"exploit_available","old":"true","new":"false"},{"seq":162887,"id":"CVE-2026-86675","ts":1789311904916,"field":"exploit_available","old":"false","new":"true"},{"seq":161682,"id":"CVE-2026-86675","ts":1789308734582,"field":"exploit_available","old":"true","new":"false"},{"seq":159795,"id":"CVE-2026-86675","ts":1789300471936,"field":"exploit_available","old":"false","new":"true"},{"seq":156784,"id":"CVE-2026-86675","ts":1789294757140,"field":"exploit_available","old":"true","new":"false"},{"seq":155579,"id":"CVE-2026-86675","ts":1789292969332,"field":"exploit_available","old":"false","new":"true"},{"seq":154374,"id":"CVE-2026-86675","ts":1789289798983,"field":"exploit_available","old":"true","new":"false"},{"seq":151625,"id":"CVE-2026-86675","ts":1789277631199,"field":"exploit_available","old":"false","new":"true"},{"seq":150586,"id":"CVE-2026-86675","ts":1789276255489,"field":"exploit_available","old":"true","new":"false"},{"seq":149553,"id":"CVE-2026-86675","ts":1789273826127,"field":"exploit_available","old":"false","new":"true"},{"seq":148520,"id":"CVE-2026-86675","ts":1789271350927,"field":"exploit_available","old":"true","new":"false"},{"seq":146551,"id":"CVE-2026-86675","ts":1789269400591,"field":"exploit_available","old":"false","new":"true"},{"seq":145356,"id":"CVE-2026-86675","ts":1789266341658,"field":"exploit_available","old":"true","new":"false"},{"seq":144260,"id":"CVE-2026-86675","ts":1789262618064,"field":"exploit_available","old":"false","new":"true"},{"seq":143164,"id":"CVE-2026-86675","ts":1789261534885,"field":"exploit_available","old":"true","new":"false"},{"seq":141995,"id":"CVE-2026-86675","ts":1789258837629,"field":"exploit_available","old":"false","new":"true"},{"seq":140836,"id":"CVE-2026-86675","ts":1789256728494,"field":"exploit_available","old":"true","new":"false"},{"seq":139638,"id":"CVE-2026-86675","ts":1789254833446,"field":"exploit_available","old":"false","new":"true"},{"seq":138440,"id":"CVE-2026-86675","ts":1789251935586,"field":"exploit_available","old":"true","new":"false"}]}