CVE-2026-86672mediumCWE-200CWE-284

CVE-2026-86672: medium-severity vulnerability in ningzichun Student Management System

ningzichun Student Management System Backup example.7z information disclosure

Published · Updated

Follow this CVE+ Monitor student-management-system

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

33Vexday Risk Score

No sign of exploitation. It has a public proof of concept.

ssvc Attendcvss 6.9epss 0.5%
A vulnerability has been found in ningzichun Student Management System up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected is an unknown function of the file example.7z of the component Backup Handler. The manipulation leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available. The project was informed of the problem early through an issue report but has not responded yet.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P
Affected products
ningzichun · Student Management System
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — ningzichun Student Management System

In the same product, most dangerous first.

CVE-2023-3007MEDIUMningzichun Student Management System Password Reset resetPassword.php password recoveryEPSS 1.0%CVE-2023-3008HIGHningzichun Student Management System login.php sql injectionEPSS 0.8%CVE-2026-86673MEDIUMningzichun Student Management System Database Connection database.php mysqli_connect hard-coded credentialsEPSS 0.5%CVE-2026-86674MEDIUMningzichun Student Management System login.php session_start session fixiationEPSS 0.4%