https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T07:43:25.481973+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-269941 EUVD-2026-269941 2026-10-06T07:43:25.554078+00:00 EUVD-2026-269941 https://cve.radiocsirt.org/vuln/fkie_cve-2026-26746 fkie_cve-2026-26746 2026-10-06T07:43:25.554117+00:00

OpenSourcePOS 3.4.1 contains a Local File Inclusion (LFI) vulnerability in the Sales.php::getInvoice() function. An attacker can read arbitrary files on the web server by manipulating the Invoice Type configuration. This issue can be chained with the file upload functionality to achieve Remote Code Execution (RCE).

 https://cve.radiocsirt.org/vuln/ghsa-8p85-wjp4-3w4m GHSA-8p85-wjp4-3w4m 2026-10-06T07:43:25.554152+00:00

OpenSourcePOS 3.4.1 contains a Local File Inclusion (LFI) vulnerability in the Sales.php::getInvoice() function. An attacker can read arbitrary files on the web server by manipulating the Invoice Type configuration. This issue can be chained with the file upload functionality to achieve Remote Code Execution (RCE).