CVE Watch30 oct 2026

CVE-2026-117028

Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An

CVSS

—

Sin CVSS

EPSS

—

KEV

—

Exploit Today

—

0-100

Publicado: 30 oct 2026 · Última mod.: 30 oct 2026

EPSS · 30d

Sin historial EPSS suficiente todavía.

Descripción técnica

Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An authenticated student can manipulate the studentId parameter to retrieve another student's examination results, including examination marks, without authorization.

Referencias oficiales

github.comhttps://github.com/dollarboysushil/cve/blob/main/CVE-2026-117028.md
github.comhttps://github.com/yungifez/skuul

CVEs relacionados

Sin CVEs relacionados por CWE o producto.