CVE-2026-111993: Soarkey StudentManagement AdminDao.java UserDao.login cleartext storage

Q: What access does an attacker need to exploit this issue?

Exploitation is limited to local execution and requires low-level privileges. No user interaction is required.

Q: Which versions are affected?

Soarkey StudentManagement is affected through commit e08f7f1d5015af407aa4cca0ada3dea189b4937e. No fixed version is identified in the available data.

Q: Is public exploit code available?

Yes. The exploit has been published and may be used.

Published Oct 18, 2026

Updated

A flaw has been found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. Impacted is the function UserDao.login of the file code/src/service/AdminDao.java. This manipulation of the argument Password causes cleartext storage of sensitive information. The attack is restricted to local execution. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

Affected Software

1 affected component

Soarkey StudentManagement<=e08f7f1d5015af407aa4cca0ada3dea189b4937e

Event History

Oct 18, 2026

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·05:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

What access does an attacker need to exploit this issue?

Exploitation is limited to local execution and requires low-level privileges. No user interaction is required.

Which versions are affected?

Soarkey StudentManagement is affected through commit e08f7f1d5015af407aa4cca0ada3dea189b4937e. No fixed version is identified in the available data.

Is public exploit code available?