CVE-2026-13568: sourcecodester inventory management system Incorrect Privilege Assignment

Vulnerability summary

CVE-2026-13568 is a high (CVSS 7.5) Incorrect Privilege Assignment vulnerability in sourcecodester inventory management system. EPSS estimates a 0.47% chance of exploitation in the next 30 days, higher than 39.5% of scored vulnerabilities.

Timeline

1. 29-06-2026
   PublishedVulnerability first disclosed.
2. 01-07-2026
   Last modifiedVulnerability information updated.

Description

A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/users_handler.php of the component User Registration Endpoint. This manipulation of the argument role causes improper access controls. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

• CWE-266Incorrect Privilege AssignmentA product incorrectly assigns a privilege to a particular actor, creating an unintended sphere of control for that actor.
• CWE-284Improper Access ControlThe product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.