CVE-2026-13568: SourceCodester Inventory Management System User Registration Endpoint users_handler.php access control

Published Jun 29, 2026

Updated

A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/usershandler.php of the component User Registration Endpoint. This manipulation of the argument role causes improper access controls. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks.

Affected Software

1 affected component

Sourcecodester Inventory Management System=1.0

Event History

Jun 29, 2026

CVE Published

via MITRE·12:45 PM

Data Sourced

via MITRE·12:45 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·02:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the severity of CVE-2026-13568?

CVE-2026-13568 has a severity score of 7.3, which is categorized as high risk.

How do I fix CVE-2026-13568?

To fix CVE-2026-13568, ensure that proper access controls are implemented in the /api/users_handler.php file.

What components are affected by CVE-2026-13568?

CVE-2026-13568 affects the User Registration Endpoint of the SourceCodester Inventory Management System.

What type of vulnerability is CVE-2026-13568?

CVE-2026-13568 is an access control vulnerability that allows improper access due to manipulation of the role argument.

When was CVE-2026-13568 published?

CVE-2026-13568 was published on June 29, 2026.