Patchwire CVEs, their patch status, and feeds to follow them

CVE-2026-116060

No fix known CVSS 7.3

A vulnerability was determined in SourceCodester Performance Indicator System 1.0. This affects an unknown part of the file /opils/staff/adddealer.php. Executing a manipulation of the argument Contact can lead to sql injection. The attack can be launched remotely. The exploit has been publicly disclosed and may be utilized.

Published 2026-10-25 · CVE record · OSV

Products: SourceCodester Performance Indicator System