Default Password Vulnerability in Student-Management-System by Sambitraj
CVE-2026-82698

6.9MEDIUM

Key Information:

Vendor

Sambitraj

Vendor
CVE Published:
31 August 2026

Badges

๐Ÿ‘พ Exploit Exists๐ŸŸก Public PoC

What is CVE-2026-82698?

The sambitraj Student-Management-System is affected by a vulnerability that allows attackers to exploit a default password found in the aca.sql file. This security flaw enables unauthorized remote access to the system. As the exploit is now publicly available, it presents a significant risk to users of the affected versions. Despite being notified early through reporting channels, the project maintainers have not addressed the issue, leaving users vulnerable to potential attacks. Continuous monitoring and immediate action are advised to mitigate risks associated with this vulnerability.

Affected Version(s)

Student-Management-System 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

References

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • ๐ŸŸก

    Public PoC available

  • ๐Ÿ‘พ

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

Credit

luff (VulDB User)
VulDB CNA Team
.