PatchTheCVEopensourcepos vulnerabilities
Recent CVEs affecting opensourcepos products. 3 tracked.
opensourcepos has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2026-04-07. Highest priority: CVE-2026-33730 (score 33/100).
- CVE-2026-32712 MEDIUM 5.4 UPGRADE Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework
- CVE-2026-39380 MEDIUM 5.4 UPGRADE Open Source Point of Sale is a web based point-of-sale application written in PHP using CodeIgniter framework
- CVE-2026-33730 MEDIUM 6.5 UPGRADE Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIg
FAQ
How do I fix opensourcepos vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is opensourcepos being exploited right now?
None of the tracked opensourcepos CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which opensourcepos CVE should I patch first?
CVE-2026-33730 currently ranks highest (33/100): Open Source Point of Sale (opensourcepos) is a web based point of sale application written in PHP using CodeIg.