Default Password Vulnerability in Student-Management-System by Sambitraj
CVE-2026-82698
Key Information:
- Vendor
Sambitraj
- Vendor
- CVE Published:
- 31 August 2026
Badges
What is CVE-2026-82698?
The sambitraj Student-Management-System is affected by a vulnerability that allows attackers to exploit a default password found in the aca.sql file. This security flaw enables unauthorized remote access to the system. As the exploit is now publicly available, it presents a significant risk to users of the affected versions. Despite being notified early through reporting channels, the project maintainers have not addressed the issue, leaving users vulnerable to potential attacks. Continuous monitoring and immediate action are advised to mitigate risks associated with this vulnerability.
Affected Version(s)
Student-Management-System 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Timeline
- ๐ก
Public PoC available
- ๐พ
Exploit known to exist
Vulnerability published
Vulnerability Reserved
