Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-108965

No fix known EPSS <1%CVSS 7.3

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This vulnerability affects unknown code of the file /opils/staff/edit_quantity.php. Executing a manipulation of the argument pqty can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Published 2026-10-13 · CVE record · OSV

Products: SourceCodester Performance Indicator System