CVE-2026-9562

A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The affected element is an unknown function of the component Dashboard. Such manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet.

• CWE-266
• CWE-284

• https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/
• https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/1
• https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/1#issue-4348905508
• https://vuldb.com/submit/815536
• https://vuldb.com/vuln/365625
• https://vuldb.com/vuln/365625/cti
• https://github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/1

Published

May 26, 2026

Last Modified

Jul 23, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-9552A security flaw has been discovered in Das Parking Managemen…7.3
• CVE-2026-9557A Server-Side Request Forgery (SSRF) vulnerability exists in…6.4
• CVE-2026-9558A Server-Side Template Injection (SSTI) vulnerability exists…9.9
• CVE-2026-9559A path traversal vulnerability exists in the campaign import…9.9
• CVE-2026-9560Privilege escalation via background service of OpenVPN Conne…7.8
• CVE-2026-9561Eclipse Kura versions prior to 5.6.2 trust the client-suppli…8.8
• CVE-2026-9563In Eclipse Parsson published Maven Central artifacts before …7.5
• CVE-2026-9564A vulnerability was found in SourceCodester/oretnom23 Hospit…2.4
• CVE-2026-9565A vulnerability was determined in haojing8312 WorkClaw up to…6.3
• CVE-2026-9566A vulnerability was identified in teableio teable up to 1.9.…4.3
• CVE-2026-9567A security flaw has been discovered in GPAC up to 2.4.0. Aff…3.3
• CVE-2026-9568A weakness has been identified in ThingsBoard up to 4.3.1.1.…5