CVE-2026-24913

HighCVSS 8.7/10Last modified Jul 25, 2026

Description

SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, information stored in the database may be obtained or altered by a user who can log in to the product.

Metrics

CVSS 4.0 8.7/10CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Apr 8, 2026
Last modified
Jul 25, 2026
NVD status
Analyzed

Related CVEs from 2026

CVE-2026-249145.5Type confusion vulnerability in the camera module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-249157.1Out-of-bounds read issue in the media subsystem. Impact: Successful exploitation of this vulnerability will affect availability and confidenCVE-2026-249165.5Identity authentication bypass vulnerability in the window module. Impact: Successful exploitation of this vulnerability may affect service CVE-2026-249175.5UAF vulnerability in the security module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-249185.5Address read vulnerability in the communication module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-249195.5Out-of-bounds write vulnerability in the DFX module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-24927.8TensorFlow HDF5 Library Uncontrolled Search Path Element Local Privilege Escalation Vulnerability. This vulnerability allows local attackersCVE-2026-249205.5Permission control vulnerability in the AMS module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-249217.1Address read vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability will affect availability and confidentiaCVE-2026-249225.5Buffer overflow vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect availability.CVE-2026-249235.5Permission control vulnerability in the HDC module. Impact: Successful exploitation of this vulnerability may affect service confidentialityCVE-2026-249245.5Vulnerability of improper permission control in the print module. Impact: Successful exploitation of this vulnerability may affect service c
CVE-2026-24913: High severity, CVSS 8.7 | Vulnix