CVE-2026-116461
Medium · 4.3CVSS
4.3
EPSS
0.2%
Published
Oct 26, 2026
CISA due date
—
The record
A vulnerability was determined in Omega Solution Restro POS up to 20261026. This impacts an unknown function of the file /sale-invoice/. Executing a manipulation of the argument productUnitSalePrice can lead to business logic errors. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|
Related vulnerabilities
- CVE-2026-106070 A flaw in the Node.js `zlib.ZipFile` API can cause it to return bytes that do not belong… CWE-840
- CVE-2026-115248 A vulnerability was detected in subhajitkhan online-clinic-management-system up to… CWE-840
- CVE-2026-85030 A vulnerability has been found in HKUDS AI-Trader up to… CWE-840
- CVE-2026-82423 A vulnerability has been found in macrozheng mall up to 1.0.3. CWE-840
- CVE-2026-79406 A security vulnerability has been detected in macrozheng mall up to 1.0.3. CWE-840
- CVE-2026-75081 A vulnerability was detected in Webkul Bagisto up to 2.4.4. CWE-840
- CVE-2026-19993 A vulnerability has been found in Webkul Bagisto up to 2.4.4. CWE-840
- CVE-2026-13571 A flaw has been found in SourceCodester Simple Food Ordering System 1.0. CWE-840