Auth bypass in Sayan365 Student-Management-System
CVE-2026-10619
A vulnerability was detected in sayan365 student-management-system up to 7f3c9ce7d410332335c2affac93a385485051800. This impacts an unknown function. The manipulation results in improper authentication. The attack can be executed remotely. The exploit is now public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
EPSS exploit prediction
EPSS: 0.005 (40.6th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 41st percentile — 40.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.005 · newest: 0.005 · change: 0.000
Affected products
Weakness classification (CWE)
References
- vuldb.com/vuln/367927 (vdb-entry)
- vuldb.com/vuln/367927/cti (signature, permissions-required)
- vuldb.com/cve/CVE-2026-10619 (third-party-advisory)
- vuldb.com/submit/829545 (third-party-advisory)
- vuldb.com/submit/829562 (third-party-advisory)
- vuldb.com/submit/829566 (third-party-advisory)
- vuldb.com/submit/829567 (third-party-advisory)
- vuldb.com/submit/829568 (third-party-advisory)
- vuldb.com/submit/829569 (third-party-advisory)
- github.com/sayan365/student-management-system/issues/3 (issue-tracking)
Frequently asked questions
- What is CVE-2026-10619?
- CVE-2026-10619 is a high-severity vulnerability in Sayan365 Student-Management-System, classified under Improper Authentication. CVSS score: 7.3/10. Published 2026-06-02.
- How severe is CVE-2026-10619?
- High severity. CVSS v3 base score is 7.3 out of 10.