Privilege escalation in Sambitraj Student-Management-System
CVE-2026-9562
A vulnerability has been found in sambitraj STUDENT-MANAGEMENT-SYSTEM up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. The affected element is an unknown function of the component Dashboard. Such manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. This product operates on a rolling release basis, ensuring continuous delivery. Consequently, there are no version details for either affected or updated releases. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet.
Published · last modified .
CVSS v3 metric
CVSS v3 base score 7.3 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L.
EPSS exploit prediction
EPSS: 0.005 (40.0th percentile), scored .
Very low probability of exploitation in the next 30 days; routine patching cadence is appropriate. 40th percentile — 40.0% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.003 · newest: 0.005 · change: +0.002
Affected products
- Sambitraj Student-Management-System — versions 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5
Weakness classification (CWE)
References
- vuldb.com/vuln/365625 (vdb-entry)
- vuldb.com/vuln/365625/cti (signature, permissions-required)
- vuldb.com/submit/815536 (third-party-advisory)
- github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/1 (issue-tracking)
- github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/issues/1 (issue-tracking, exploit)
- github.com/sambitraj/STUDENT-MANAGEMENT-SYSTEM/ (product)
Frequently asked questions
- What is CVE-2026-9562?
- CVE-2026-9562 is a high-severity vulnerability in Sambitraj Student-Management-System, classified under Incorrect Privilege Assignment. CVSS score: 7.3/10. Published 2026-05-26.
- How severe is CVE-2026-9562?
- High severity. CVSS v3 base score is 7.3 out of 10.