CVE-2026-8219Disclosure

LOWCVSS 1.9 · LOW

Signal is active with 3 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The manipulation leads to cross site scripting. Remote exploitation of the attack is possible. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

0.0/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-79CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 3 mentions across 1 observed day

What's happening

  • Technical details provided in 1 signal
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • 3 total mentions across 1 day

Deep dive

Activity timeline3 mentions / 1d
01223Mentions · 2026-05-10: 3Technical Details · 2026-05-10: 105-10
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Full discourse3 posts
  • Infoflowcloud@infoflowcloud
    General

    🚨*CVE* CVE-2026-8219 A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The … https://www.cve.org/CVERecord?id=CVE-2026-8219 ----- Traducción: CVE-2026-8219 Se … http://infoflow.cloud`

    Post summary

    The post announces CVE-2026-8219 for Devs Palace ERP Online but provides no further detail or actionable information.

    0000027
    76 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-8219 A security vulnerability has been detected in Devs Palace ERP Online up to 4.0.0. The impacted element is an unknown function of the file /inventory/supplier-save. The … https://www.cve.org/CVERecord?id=CVE-2026-8219

    Post summary

    CVE‑2026‑8219 has been identified in Devs Palace ERP Online up to version 4.0.0, affecting an unknown function in /inventory/supplier‑save, but no further technical details, exploitation evidence, or remediation steps are provided.

    00000139
    57.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-8219 Cross Site Scripting in Devs Palace ERP Online Up to 4.0.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-8219

    Post summary

    A new Cross Site Scripting vulnerability (CVE‑2026‑8219) was disclosed for Devs Palace ERP Online up to version 4.0.0, with technical details listed on a vulnerability database.

    0000053
    4.0K followersView on X

Explore more