CVE-2026-25753

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application uses a hard-coded, static default password for all newly created student accounts. This results in mass account takeover, allowing any attacker to log in as any student once the password is known.

• CWE-259

• https://github.com/Praskla-Technology/assessment-placipy/security/advisories/GHSA-6537-cf56-j9w2Mitigation, Vendor Advisory

Published

Feb 6, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-25748authentik is an open-source identity provider. Prior to 2025…7.5
• CVE-2026-25749Vim is an open source, command line text editor. Prior to ve…6.6
• CVE-2026-2575A flaw was found in Keycloak. An unauthenticated remote atta…5.3
• CVE-2026-25750Langchain Helm Charts are Helm charts for deploying Langchai…8.1
• CVE-2026-25751FUXA is a web-based Process Visualization (SCADA/HMI/Dashboa…7.5
• CVE-2026-25752FUXA is a web-based Process Visualization (SCADA/HMI/Dashboa…9.1
• CVE-2026-25754AdonisJS is a TypeScript-first web framework. Prior to versi…7.2
• CVE-2026-25755jsPDF is a library to generate PDFs in JavaScript. Prior to …8.8
• CVE-2026-25757Spree is an open source e-commerce solution built with Ruby …5.3
• CVE-2026-25758Spree is an open source e-commerce solution built with Ruby …7.5
• CVE-2026-25759Statmatic is a Laravel and Git powered content management sy…8.7
• CVE-2026-2576The Business Directory Plugin – Easy Listing Directories for…7.5