Icz Matcha Invoice — known CVE vulnerabilities

Every CVE whose affected-product data names Icz Matcha Invoice, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2026-24913 — CVSS 8.8 (high): SQL Injection vulnerability exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, information stored in the…
• CVE-2026-33273 — CVSS 7.2 (high): Unrestricted upload of file with dangerous type issue exists in MATCHA INVOICE 2.6.6 and earlier. If this vulnerability is exploited, an…