Medium severity6.3NVD Advisory· Published Sep 3, 2026· Updated Sep 4, 2026
CVE-2026-85186
CVE-2026-85186
Description
A weakness has been identified in itsourcecode Online Medicine Delivery System 1.0. Affected by this vulnerability is the function doupdateimage of the file /customer/controller.php?action=photos of the component Customer Controller. Executing a manipulation of the argument photo can lead to unrestricted upload. The attack may be performed from remote. The exploit has been made available to the public and could be used for attacks.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
1- Range: 1.0
Patches
Vulnerability mechanics
References
6News mentions
2- WWBN AVideo: 25 Vulnerabilities Disclosed in Early September 2026 BatchVypr Intelligence · Sep 5, 2026
- Itsourcecode Systems: Six Vulnerabilities Including SQLi and Upload Flaws Disclosed TogetherVypr Intelligence · Sep 4, 2026