CVE-2026-90566

Name of the Vulnerable Software and Affected Versions Rizwan17 inventory-management-system versions up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f

Description A weakness in the Registration Handler component allows remote attackers to achieve improper authorization. This occurs through the manipulation of the usertype argument within the createUserAccount() function located in the register.php file.

Recommendations As a temporary workaround, restrict access to the createUserAccount() function in the register.php file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.