EUVD-2026-75213

A security vulnerability has been detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This affects an unknown part of the file includes/invoicebill.php of the component Invoice Generation. Such manipulation of the argument orderdate/invoiceno leads to...

CVE-2026-87924

A security vulnerability has been detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This affects an unknown part of the file includes/invoicebill.php of the component Invoice Generation. Such manipulation of the argument orderdate/invoiceno leads to...

CVE-2026-87924

CVE-2026-87924 affects the Rizwan17 inventory-management-system (GitHub) up to commit bfe78a330d01bb26b9daec5dc9ecd5c77900e03f . The vulnerability resides in includes/invoice_bill.php within the Invoice Generation component. Manipulation of the order_date and invoice_no arguments results in missi...

PT-2026-89184

A security vulnerability has been detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This affects an unknown part of the file includes/invoice bill.php of the component Invoice Generation. Such manipulation of the argument order date/invoice no leads ...

CVE-2026-87924: Missing Authentication for Critical Function

A security vulnerability has been detected in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. This affects an unknown part of the file includes/invoicebill.php of the component Invoice Generation. Such manipulation of the argument orderdate/invoiceno leads to...

CVE-2026-71626

An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.php, UpdateWebhookRequest.php, and WebhookSingle.php components...

CVE-2026-71626

An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.php, UpdateWebhookRequest.php, and WebhookSingle.php components...

CVE-2026-71626

A vulnerability in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information . The issue is located within the StoreWebhookRequest.php , UpdateWebhookRequest.php , and WebhookSingle.php components. While the technical root cause is not explicitly detailed in the provided doc...

CVE-2026-71626

An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.php, UpdateWebhookRequest.php, and WebhookSingle.php components...

EUVD-2026-71744

An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.php, UpdateWebhookRequest.php, and WebhookSingle.php components...

PT-2026-86245

An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.php, UpdateWebhookRequest.php, and WebhookSingle.php components...

CVE-2026-71626: Exposure of Sensitive Information to an Unauthorized Actor

An issue in Invoice Ninja v5.13.24 allows a remote attacker to obtain sensitive information via the StoreWebhookRequest.php, UpdateWebhookRequest.php, and WebhookSingle.php components...

CVE-2026-83744

A security vulnerability has been detected in invoiceninja Invoice Ninja up to 5.13.26. This vulnerability affects the function Purify::isHostSafe of the file app/Services/Pdf/Purify.php of the component invoices Endpoint. The manipulation of the argument notes leads to server-side request forger...

CVE-2026-83743

A weakness has been identified in invoiceninja Invoice Ninja up to 5.13.26. This affects an unknown part of the file /vedor/profile/ of the component Vendor Portal Profile Update. Executing a manipulation of the argument vendorcontact can lead to authorization bypass. The attack may be performed...

CVE-2026-83744 invoiceninja Invoice Ninja invoices Endpoint Purify.php isHostSafe server-side request forgery

A security vulnerability has been detected in invoiceninja Invoice Ninja up to 5.13.26. This vulnerability affects the function Purify::isHostSafe of the file app/Services/Pdf/Purify.php of the component invoices Endpoint. The manipulation of the argument notes leads to server-side request forger...

EUVD-2026-68982

A security vulnerability has been detected in invoiceninja Invoice Ninja up to 5.13.26. This vulnerability affects the function Purify::isHostSafe of the file app/Services/Pdf/Purify.php of the component invoices Endpoint. The manipulation of the argument notes leads to server-side request forger...

CVE-2026-83744 invoiceninja Invoice Ninja invoices Endpoint Purify.php isHostSafe server-side request forgery

A security vulnerability has been detected in invoiceninja Invoice Ninja up to 5.13.26. This vulnerability affects the function Purify::isHostSafe of the file app/Services/Pdf/Purify.php of the component invoices Endpoint. The manipulation of the argument notes leads to server-side request forger...

CVE-2026-83744

Invoice Ninja up to 5.13.26 is affected by a Server-Side Request Forgery (SSRF) in the invoices Endpoint , specifically in the function Purify::isHostSafe within app/Services/Pdf/Purify.php. Manipulating the notes argument allows a remote, low-privileged attacker to forge server-side requests. Th...

CVE-2026-83743 invoiceninja Invoice Ninja Vendor Portal Profile Update profile authorization

A weakness has been identified in invoiceninja Invoice Ninja up to 5.13.26. This affects an unknown part of the file /vedor/profile/ of the component Vendor Portal Profile Update. Executing a manipulation of the argument vendorcontact can lead to authorization bypass. The attack may be performed...

CVE-2026-83743

Invoice Ninja versions up to 5.13.26 are affected by an authorization bypass in the Vendor Portal Profile Update component (file /vendor/profile/). By manipulating the vendor_contact argument, a remotely authenticated user (low privileges) can bypass access controls, resulting in low impact on co...