CVE-2026-116461
Omega Solution Restro POS sale-invoice logic error
Omega Solution Restro POS
CVSS
5.3MediumExploitationNo known exploitationNot in CISA KEV, which does not prove it is unexploitedCISA KEV
Exploit odds (EPSS)No scoreNo FIRST EPSS score in this snapshot yet
Fixed inNone listedNo source names a fixed version. Check the vendor advisory below
What fixes it
No source in this snapshot names a fixed version. The vendor advisories under References are the place to check.
Reports 2
2 outlets mention it. Reports are not confirmation; each links to its source.
- 🚨 CVE-2026-116461 A vulnerability was determined in Omega Solution Restro POS up to 20261026. This impacts an unknown function of the file /sale-invoice/. Executing a manipulation of the argument prodTelegram: CVE Notify, 26 Oct 2026
- @cve.skyfleet.blue: CVE-2026-116461 - Omega Solution Restro POS sale-invoice logic error CVE ID : CVE-2026-116461 Published : Oct. 26, 2026, 5:45 p.m. | 16 minutes ago Description : A vulnerability waBluesky: CVE posts, 26 Oct 2026
Description
A vulnerability was determined in Omega Solution Restro POS up to 20261026. This impacts an unknown function of the file /sale-invoice/. Executing a manipulation of the argument productUnitSalePrice can lead to business logic errors. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. The vendor was contacted early about this disclosure but did not respond in any way.
Text from CVE List
Affected versions 1
- Restro POSaffected: 20261026CVE List