CVE-2026-117028: Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method

Unscored severity · published Oct 30, 2026

CVE-2026-117028

Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method

New

–

CVSS

–

EPSS

No

On KEV

Description

Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An authenticated student can manipulate the studentId parameter to retrieve another student's examination results, including examination marks, without authorization.

Exploitation

Is it being used?

Exploited in the wildNo evidence yet

CISA KEVNot listed

Ransomware campaign useNot known

References

NVD

https://nvd.nist.gov/vuln/detail/CVE-2026-117028

CVE.org

https://www.cve.org/CVERecord?id=CVE-2026-117028

github.com

https://github.com/dollarboysushil/cve/blob/main/CVE-2026-117028.md

github.com

https://github.com/yungifez/skuul