CVE-2026-91107

Received Received - Intake

Authenticated Staff Password Reset in openSIS Classic 9.3

Publication date: 2026-10-05

Last updated on: 2026-10-05

Assigner: Fluid Attacks

Description

openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staff_id and cause the School Information update path to reset that selected account's password.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-05

Last Modified

2026-10-05

Generated

2026-10-06

AI Q&A

2026-10-06

EPSS Evaluated

N/A

NVD

CVE-2026-91107

EUVD

EUVD-2026-92806

Affected Vendors & Products

Vendor	Product	Version / Range
OS4ED	openSIS-Classic	9.3

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-639	The system's authorization functionality does not prevent one user from gaining access to another user's data or record by modifying the key value identifying the data.

Attack-Flow Graph

Executive Summary

openSIS Classic 9.3 has a vulnerability where an authenticated teacher can manipulate the staff_id parameter to reset the password of any staff account. This occurs due to insufficient input validation in the School Information update path.

Impact Analysis

An attacker with teacher access could reset passwords of other staff members, potentially gaining unauthorized access to sensitive school data or administrative functions. This could lead to data breaches or system misuse.

Compliance Impact

This vulnerability could violate data protection regulations like GDPR or HIPAA by enabling unauthorized access to personal or health information. Schools handling such data must address this flaw to maintain compliance.

Mitigation Strategies

Immediately restrict teacher role permissions to prevent arbitrary staff record selection. Review and update password reset mechanisms to ensure only authorized users can trigger them. Monitor for unusual password reset activities or unauthorized account changes.

Hi! I’m here to help you understand CVE-2026-91107. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70