Skip to content
OpenAdvisories
High · 8.8 CVE-2026-24913 EUVD-2026-20051

SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, information stored in the datab…

Published Apr 8, 2026 · Updated Apr 8, 2026 · Assigned by jpcert

Vendor: ICZ Product: MATCHA INVOICE

Description

SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, information stored in the database may be obtained or altered by a user who can log in to the product.

Affected products

VendorProductAffectedFixed
ICZ MATCHA INVOICE 2.6.6 and earlier —

References