CVE-2026-90565— Rizwan17 inventory-management-system dashboard.php access control
Quick assessment
Affected
Rizwan17 inventory-management-system
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Rizwan17 库存管理系统（Rizwan17 inventory-management-system）中（提交版本 bfe78a330d01bb26b9daec5dc9ecd5c77900e03f 之前）发现了一个安全缺陷。受影响的是文件 中的一个未知函数。通过对参数 进行操纵，可导致访问控制不当（improper access controls）。该漏洞可以被远程利用。利用代码（exploit）已公开，并可能已被用于实际攻击。 该产品采用滚动发布（rolling release）以实现持续交付，因此无法提
Possible ATT&CK Techniques 3 AI
T1078 · Valid Accounts T1190 · Exploit Public-Facing Application T1079
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-90565
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Rizwan17 inventory-management-system dashboard.php access control
Source: CVE Program / CVE List V5
Vulnerability Description
A security flaw has been discovered in Rizwan17 inventory-management-system up to bfe78a330d01bb26b9daec5dc9ecd5c77900e03f. Affected is an unknown function of the file dashboard.php. Performing a manipulation of the argument userid results in improper access controls. It is possible to initiate the attack remotely. The exploit has been released to the public and may be used for attacks. This product is using a rolling release to provide continious delivery. Therefore, no version details for affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
访问控制不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Rizwan17 | inventory-management-system | bfe78a330d01bb26b9daec5dc9ecd5c77900e03f |
cpe:2.3:a:rizwan17:inventory-management-system:*:*:*:*:*:*:*:*
|
|
II. Public POCs for CVE-2026-90565
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-90565
请登录查看更多情报信息。
Proof of Concept for CVE-2026-90565 (1)
Other References for CVE-2026-90565 (1)
IV. Related Vulnerabilities
Same product: inventory-management-system
-
CVE-2026-90566
Rizwan17 inventory-management-system Registration register.p -
CVE-2026-87926
Rizwan17 inventory-management-system Login Page index.php cr -
CVE-2026-87925
Rizwan17 inventory-management-system manage.php storeCustome -
CVE-2026-87924
Rizwan17 inventory-management-system Invoice Generation invo -
CVE-2026-87923
Rizwan17 inventory-management-system List DBOperation.php cr
Same vendor: Rizwan17
-
CVE-2026-90566
Rizwan17 inventory-management-system Registration register.p -
CVE-2026-87926
Rizwan17 inventory-management-system Login Page index.php cr -
CVE-2026-87925
Rizwan17 inventory-management-system manage.php storeCustome -
CVE-2026-87924
Rizwan17 inventory-management-system Invoice Generation invo -
CVE-2026-87923
Rizwan17 inventory-management-system List DBOperation.php cr
Same weakness: CWE-284
-
CVE-2026-90518
PHPGurukul Bank Locker Management System sidebar.php access -
CVE-2026-90507
vvbbnn00 WARP-Clash-API Subscription subscription.py get_sur -
CVE-2026-90493
Tonec Internet Download Manager Kernel Driver idmwfp.sys acc -
CVE-2026-79725
Langflow is vulnerable to unauthorized file system access du -
CVE-2026-81941
Langflow is vulnerable to arbitrary code execution due to mu
V. Comments for CVE-2026-90565
No comments yet