CVE-2026-117028: Security vulnerability

Published Oct 30, 2026

Updated

Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An authenticated student can manipulate the studentId parameter to retrieve another student's examination results, including examination marks, without authorization.

Event History

Oct 30, 2026

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·02:16 PM

Description

Frequently Asked Questions

Who can exploit this issue?

An authenticated student can exploit it. The attacker needs access to a student account and the ability to manipulate the studentId parameter.

What information can be exposed?

An attacker can retrieve another student's examination results, including examination marks.

Are deployments affected by version?

Skuul School Management System through version 2.6.5 is affected.

CVE-2026-117028: Security vulnerability

Event History

Frequently Asked Questions

Who can exploit this issue?

What information can be exposed?

Are deployments affected by version?

Company

Resources

Contact

Frequently Asked Questions

Who can exploit this issue?

What information can be exposed?

Are deployments affected by version?