PT-2026-47293 · Sourcecodester · Sourcecodester Inventory System

Kamran Saifullah · CVE-2026-11519 · Published 2026-06-08 · Updated 2026-06-09

Positive Technologies (AI Summary)

CVSS v2.0

6.5

Medium

Base vector

AV:N/AC:L/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SourceCodester Inventory System version 1.0

Description An improper authorization issue exists in the Account Creation Handler component within the file '/Product Inventory/api/users handler.php'. A remote attacker can manipulate the ROLE argument to bypass authorization controls.

Recommendations Update SourceCodester Inventory System to a version newer than 1.0. As a temporary workaround, restrict access to the '/Product Inventory/api/users handler.php' endpoint or avoid using the ROLE parameter until a patch is applied.

Fix

Improper Authorization

Incorrect Privilege Assignment

Weakness Enumeration

CWE-285

CWE-266

Related Identifiers

CVE-2026-11519

Affected Products

Sourcecodester Inventory System

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2026-11519 · Security Note
• https://t.me/CVEtracker/56174 · Telegram Post
• https://vuldb.com/submit/836392 · Note
• https://t.me/cveNotify/166605 · Telegram Post
• https://vuldb.com/cve/CVE-2026-11519 · Note
• https://vuldb.com/vuln/369139 · Note
• https://vuldb.com/vuln/369139/cti · Note
• https://sourcecodester.com · Note