CVE-2026-117028
Received Received - Intake

Incorrect Access Control in Skuul School Management System Allows Unauthorized Grade Disclosure

Publication date: 2026-10-30

Last updated on: 2026-10-30

Assigner: MITRE

Description
Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An authenticated student can manipulate the studentId parameter to retrieve another student's examination results, including examination marks, without authorization.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-10-30
Last Modified
2026-10-30
Generated
2026-10-30
AI Q&A
2026-10-30
EPSS Evaluated
N/A
NVD
CVE-2026-117028
EUVD
EUVD-2026-113992

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
n/a n/a n/a

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-UNKNOWN

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

The Skuul School Management System up to version 2.6.5 has a flaw in the ResultChecker::checkResult method. An authenticated student can change the studentId parameter to access another student's exam results without permission, including marks.

Impact Analysis

If you are a student using this system, your exam results could be viewed by others without your consent. This could lead to privacy breaches and unfair advantages or disadvantages in academic settings.

Compliance Impact

This vulnerability likely violates privacy regulations like GDPR and HIPAA by allowing unauthorized access to sensitive student data, including examination marks. It could result in legal penalties and loss of trust.

Mitigation Strategies

Update Skuul School Management System to the latest version beyond 2.6.5 to address the incorrect access control issue in ResultChecker::checkResult.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-117028. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart