PatchTheCVECVE-2026-1059: A security vulnerability has been detected in FeMiner wms up to 9cad1f1b179a98b9547fd003c23b07c7594775fa
CVE-2026-1059 is a high-severity flaw (CVSS 7.3) affecting warehouse management system. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
A security vulnerability has been detected in FeMiner wms up to 9cad1f1b179a98b9547fd003c23b07c7594775fa. Affected by this vulnerability is an unknown functionality of the file /src/chkuser.php. The manipulation of the argument Username leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. This product adopts a rolling release strategy to maintain continuous delivery. T
Why this priority
- High severity
- Public exploit reference
- Remotely exploitable, no login, no user action
A fixed release or distro patch exists.
Last updated 2026-06-17 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2026-1059?
warehouse management system: upgrade to newer than 2021-11-15. Exact commands for each OS are on this page.
Is CVE-2026-1059 being exploited?
CVE-2026-1059 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2026-1059 affect?
CVE-2026-1059 affects warehouse management system. Severity is high (CVSS 7.3). A security vulnerability has been detected in FeMiner wms up to 9cad1f1b179a98b9547fd003c23b07c7594775fa. Affected by this vulnerability is an unknown functionality of the file /src/chkuser.php. The manipulation of the argument Username lea
How urgent is CVE-2026-1059?
Priority 45/100. High severity; Public exploit reference; Remotely exploitable, no login, no user action
Software pages
Related CVEs
- CVE-2025-65878 HIGH 7.5 DOWNGRADE The warehouse management system version 1.2 contains an arbitrary file read vulnerability
- CVE-2025-65879 HIGH 8.1 UPGRADE Warehouse Management System 1.2 contains an authenticated arbitrary file deletion vulnerability
- CVE-2025-5163 MEDIUM 5.3 DOWNGRADE A vulnerability, which was classified as problematic, was found in yangshare 技术杨工 warehouseManager 仓库管理系统 1.0
- CVE-2024-3616 LOW 3.5 DOWNGRADE A vulnerability classified as problematic was found in SourceCodester Warehouse Management System 1.0
- CVE-2024-3614 LOW 3.5 DOWNGRADE A vulnerability classified as problematic has been found in SourceCodester Warehouse Management System 1.0