CVE-2026-76176

UNKNOWN 0.0

Multiple vulnerabilities in Ocsreports for OCS Inventory NG

CVSS Score

0.0

EPSS Score

0.0%

EPSS Percentile

0th

SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admin_double due to improper processing of the values in the ID field included in the selected_grp_dupli[] parameter. An authenticated user with operator privileges can manipulate these values to alter the SQL queries executed by the application and retrieve information stored in the database.

CWE	CWE-89
Vendor	ocs inventory ng
Product	ocsreports
Published	Sep 3, 2026
Last Updated	Sep 3, 2026

Stay Ahead of the Next One

Get instant alerts for ocs inventory ng ocsreports

Be the first to know when new unknown vulnerabilities affecting ocs inventory ng ocsreports are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

Affected Versions

OCS Inventory NG / Ocsreports

2.12.6

References

NVD ↗ CVE.org ↗ EPSS Data ↗

incibe.es: https://www.incibe.es/en/incibe-cert/notices/aviso/multiple-vulnerabilities-ocsreports-ocs-inventory-ng

Credits

Marc Monfort Muñoz