CVE-2026-86673

A vulnerability was determined in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this issue is the function mysqli_connect of the file config/database.php of the component Database Connection. This manipulation causes hard-coded credentials. The attack may be initiated remotely. The exploit has been publicly disclosed and may be utilized. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-259
• CWE-798

• https://github.com/ningzichun/student-management-system/issues/15
• https://vuldb.com/cve/CVE-2026-86673
• https://vuldb.com/submit/908932
• https://vuldb.com/vuln/399764
• https://vuldb.com/vuln/399764/cti

Published

Sep 8, 2026

Last Modified

Sep 8, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-86667A weakness has been identified in aircheng-org iWebShop-5 up…4.7
• CVE-2026-86668A security vulnerability has been detected in aircheng-org i…4.3
• CVE-2026-86669A vulnerability was detected in aircheng-org iWebShop-5 up t…7.3
• CVE-2026-8667GitLab has remediated an issue in GitLab CE/EE affecting all…4.3
• CVE-2026-86670A flaw has been found in aircheng-org iWebShop-5 up to 5.15.…3.7
• CVE-2026-86672A vulnerability has been found in ningzichun Student Managem…5.3
• CVE-2026-86674A vulnerability was found in ningzichun Student Management S…6.3
• CVE-2026-86675A vulnerability was identified in itsourcecode Sales and Inv…6.3
• CVE-2026-8668A static credential embedded in Chef 360 prior to v1.7.0 per…2.3
• CVE-2026-8669Imager versions through 1.030 for Perl allow a heap out of b…6.5
• CVE-2026-8670Insufficient session expiration vulnerability in syslink sof…9.6
• CVE-2026-8671Insertion of sensitive information into log file vulnerabili…7.5