Threats tagged 'ghsa-xww7-g6xr-3jgc'

CVE-2026-90566 is an improper authorization vulnerability in the Rizwan17 inventory-management-system affecting the createUserAccount function in register.php. Manipulating the usertype argument can lead to unauthorized actions. The vulnerability can be exploited remotely and public exploit code is available. The project uses rolling releases, so specific affected versions are not provided. The vendor has been informed but has not yet responded or issued a fix.