Auth bypass in Ealpha072 Student-Management-System
CVE-2026-10777
A vulnerability was identified in ealpha072 Student-Management-System up to 01451bd7a2f58cdda07bd0b86e3967582e3ecd08. Affected by this issue is some unknown functionality of the file admin/config.php of the component Administrative Backend. Such manipulation leads to improper authentication. The attack may be performed from remote. The exploit is publicly available and might be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.
Vulnerability class: Broken Authentication
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
EPSS exploit prediction
EPSS: 0.004 (32.6th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 33rd percentile — 32.6% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.004 · newest: 0.004 · change: 0.000
Affected products
- Ealpha072 Student-Management-System — versions 01451bd7a2f58cdda07bd0b86e3967582e3ecd08
Weakness classification (CWE)
References
- vuldb.com/vuln/368139 (vdb-entry)
- vuldb.com/vuln/368139/cti (signature, permissions-required)
- vuldb.com/cve/CVE-2026-10777 (third-party-advisory)
- vuldb.com/submit/831445 (third-party-advisory)
- github.com/ealpha072/Student-Management-System/issues/2 (issue-tracking, exploit)
- github.com/ealpha072/Student-Management-System/ (product)
Frequently asked questions
- What is CVE-2026-10777?
- CVE-2026-10777 is a high-severity vulnerability in Ealpha072 Student-Management-System, classified under Improper Authentication. CVSS score: 7.3/10. Published 2026-06-03.
- How severe is CVE-2026-10777?
- High severity. CVSS v3 base score is 7.3 out of 10.