PatchTheCVEopen source point of sale vulnerabilities and fixes
Recent CVEs affecting open source point of sale, with upgrade or downgrade steps. 2 tracked.
Also searched as: opensourcepointofsale.
open source point of sale has 2 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 2. Most recent: 2026-04-07. Highest priority: CVE-2026-32712 (score 25/100).
- CVE-2026-32712 MEDIUM 5.4 UPGRADE Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework
- CVE-2026-39380 MEDIUM 5.4 UPGRADE Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework
FAQ
How do I fix open source point of sale vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is open source point of sale being exploited right now?
None of the tracked open source point of sale CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which open source point of sale CVE should I patch first?
CVE-2026-32712 currently ranks highest (25/100): Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework.