CVE-2026-90566

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-90566
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90566.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-90566
Published
2026-09-13T15:45:07Z
Modified
2026-10-21T03:00:10Z
Severity
  • 5.5 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P CVSS Calculator
Summary
Rizwan17 inventory-management-system Registration register.php createUserAccount improper authorization
Details

A weakness has been identified in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected by this vulnerability is the function createUserAccount of the file register.php of the component Registration Handler. Executing a manipulation of the argument usertype can lead to improper authorization. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. This product takes the approach of rolling releases to provide continious delivery. Therefore, version details for affected and updated releases are not available. The project was informed of the problem early through an issue report but has not responded yet.

Database specific 
{
    "cna_assigner":  "VulDB",
    "cwe_ids":  [
        "CWE-266",
        "CWE-285"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/90xxx/CVE-2026-90566.json"
}
References

Affected packages

Git / github.com/rizwan17/inventory-management-system

Affected ranges

Type
GIT
Repo
http://github.com/rizwan17/inventory-management-system
Events
Introduced
bfe78a330d01bb26b9daec5dc9ecd5c77900e03f
Last Affected
bfe78a330d01bb26b9daec5dc9ecd5c77900e03f
Database specific
Show details 
{
    "extracted_events":  [
        {
            "range":  [
                {
                    "introduced":  "bfe78a330d01bb26b9daec5dc9ecd5c77900e03f"
                },
                {
                    "last_affected":  "bfe78a330d01bb26b9daec5dc9ecd5c77900e03f"
                }
            ],
            "source":  "AFFECTED_FIELD",
            "strategy":  "StandaloneSingleVersion"
        }
    ]
}

Affected versions

Other
bfe78a330d01bb26b9daec5dc9ecd5c77900e03f

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-90566.json"