CVE-2026-100878

Received Received - Intake

Authorization Bypass in StarTraining via SysUser.isAdmin

Publication date: 2026-09-27

Last updated on: 2026-09-27

Assigner: VulDB

Description

A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the function SysUser.isAdmin of the file edu-common/src/main/java/com/edu/common/core/domain/entity/SysUser.java of the component authRole Endpoint. The manipulation of the argument userId/roleIds leads to authorization bypass. The attack is possible to be carried out remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-09-27

Last Modified

2026-09-27

Generated

2026-09-28

AI Q&A

2026-09-28

EPSS Evaluated

N/A

NVD

CVE-2026-100878

Affected Vendors & Products

Vendor	Product	Version / Range
zhistaredu	startraining	to 3.8.1 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-285	The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

This vulnerability is an authorization bypass in the zhistaredu StarTraining software up to version 3.8.1. It exists in the SysUser.isAdmin function within the authRole Endpoint, where manipulating userId or roleIds parameters allows unauthorized access. The issue is remotely exploitable and a public exploit is available.

Detection Guidance

This vulnerability involves an authorization bypass in zhistaredu StarTraining up to 3.8.1, specifically in the SysUser.isAdmin function. Detection requires checking for unauthorized access attempts or modifications to userId/roleIds parameters in the authRole endpoint. Review logs for unusual activity in the edu-common/src/main/java/com/edu/common/core/domain/entity/SysUser.java file or related components.

Impact Analysis

An attacker could exploit this to gain unauthorized administrative privileges by bypassing authentication checks. This may allow them to access sensitive data, modify system settings, or perform actions reserved for administrators without proper authorization.

Compliance Impact

The vulnerability allows remote authorization bypass, which could lead to unauthorized access to sensitive data. This may violate compliance requirements under GDPR (data protection) and HIPAA (healthcare data privacy) by enabling unauthorized access to personal or protected health information.

Mitigation Strategies

Immediately update StarTraining to the latest version beyond 3.8.1 to address the authorization bypass in SysUser.isAdmin. If no update is available, restrict access to the authRole endpoint and monitor for unauthorized access attempts. Disable remote access if not required.

Hi! I’m here to help you understand CVE-2026-100878. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70