CVE-2026-33531
SQL injection in Inventree Project
CVSS score
6.5
EPSS probability
%0.4
Risk score
0.0
Published
6 mo ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
This repository contains a professional write-up of a path traversal vulnerability discovered in InvenTree's report template engine. This vulnerability was patched in versions 1.2.6 and 1.3.0.
Makefile Go / Python
Similar Vulnerabilities
9.9
CVE-2026-35477
Vulnerability in Inventree Project
IP
Patch status unknownEPSS %0
8.1
CVE-2026-35478
Vulnerability in Inventree Project
IP
Patch status unknownEPSS %0
7.1
CVE-2026-39362
Server-side request forgery in Inventree Project
IP
Patch status unknownEPSS %0
4.7
CVE-2026-35479
Vulnerability in Inventree Project
IP
Patch status unknownEPSS %0
6.5
CVE-2026-33530
Vulnerability in Inventree Project
IP
Patch verifiedEPSS %0
4.3
CVE-2026-35476
Vulnerability in Inventree Project
IP
Patch status unknownEPSS %0
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-33531"