Information disclosure in Ningzichun Student Management System
CVE-2026-86672
A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function of the file example.7z of the component Backup Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
Vulnerability class: Information Disclosure
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Ningzichun Student Management System — versions 98760f5711cf6dc8b4adca53a9e207ca49b02ebf
Weakness classification (CWE)
References
- cna@vuldb.com (vdb-entry)
- cna@vuldb.com (signature, permissions-required)
- cna@vuldb.com (third-party-advisory)
- cna@vuldb.com (third-party-advisory)
- cna@vuldb.com (issue-tracking, exploit)
Frequently asked questions
- What is CVE-2026-86672?
- CVE-2026-86672 is a medium-severity vulnerability in Ningzichun Student Management System, classified under Information Disclosure. CVSS score: 5.3/10. Published 2026-09-08.
- How severe is CVE-2026-86672?
- Medium severity. CVSS v3 base score is 5.3 out of 10.