CVE-2026-26746 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

OpenSourcePOS 3.4.1 contains a Local File Inclusion (LFI) vulnerability in the Sales.php::getInvoice() function. An attacker can read arbitrary files on the web…
High CVSS: 8.8

CVE-2026-26746

OpenSourcePOS 3.4.1 contains a Local File Inclusion (LFI) vulnerability in the Sales.php::getInvoice() function. An attacker can read arbitrary files on the web server by manipulating the Invoice Type configuration. This issue can be chained with the file upload functionality to achieve Remote Code Execution (RCE).
Vendor
Opensourcepos
Product
Open Source Point Of Sale
CWE
CWE-434
Yayın Tarihi
2026-02-20 17:25:55
Güncelleme
2026-02-24 20:42:28
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-434 Open Source Point Of Sale HIGH Opensourcepos 2026

Referanslar

https://github.com/hungnqdz/CVE-2026-26746/blob/main/CVE-2026-26746.md https://github.com/opensourcepos/opensourcepos