Sourcecodester Inventory Management System vulnerabilities
6 CVEs affecting Sourcecodester Inventory Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-90697, published 2026-09-14.
More from Sourcecodester.
Highest priority
Known exploited (CISA KEV) first, then by EPSS exploit probability.
- CVE-2026-13568, published 2026-06-29. High severity, CVSS 7.3. EPSS: 0.5% chance of exploitation in the next 30 days. A weakness has been identified in SourceCodester Inventory Management System 1.0. This vulnerability affects unknown code of the file /api/users_handler.php of the component User Registration…
- CVE-2026-90697, published 2026-09-14. Medium severity, CVSS 4.3. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability was identified in SourceCodester Inventory Management System 1.0. This affects an unknown part of the file invoice.php. The manipulation of the argument ID leads to authorization…
- CVE-2026-90696, published 2026-09-14. Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was determined in SourceCodester Inventory Management System 1.0. Affected by this issue is some unknown functionality of the file /api/products_handler.php of the component Product…
- CVE-2026-90695, published 2026-09-14. Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Inventory Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /api/vendors_handler.php of the component Vendor…
- CVE-2026-90694, published 2026-09-14. Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability has been found in SourceCodester Inventory Management System 1.0. Affected is an unknown function of the file /api/customers_handler.php of the component Customer Management Module.…
- CVE-2026-13570, published 2026-06-29. Low severity, CVSS 3.5. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability was detected in SourceCodester Inventory Management System 1.0. Impacted is an unknown function of the file /api/users_handler.php of the component User Registration Endpoint.…