CVE-2026-97649

4.7 MEDIUMpublic exploit available

Published 2026-09-25 · Updated 2026-09-25

AI analysis for this CVE has not been generated yet. Raw NVD data is shown below.

NVD description

A flaw has been found in ningzichun student-management-system up to 98760f5711cf6dc8b4adca53a9e207ca49b02ebf. Affected by this vulnerability is an unknown functionality of the file example_lite.sql. Executing a manipulation can lead to use of default credentials. It is possible to launch the attack remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Weaknesses

CWE-1392

Public exploit & PoC references

https://github.com/ningzichun/student-management-system/
https://github.com/ningzichun/student-management-system/issues/13

All references

https://github.com/ningzichun/student-management-system/
https://github.com/ningzichun/student-management-system/issues/13
https://vuldb.com/cve/CVE-2026-97649
https://vuldb.com/submit/910058
https://vuldb.com/vuln/409751
https://vuldb.com/vuln/409751/cti

Source data: NVD (nvd.nist.gov), public domain. Exploit-DB.ai adds local AI analysis for defensive use only.

Related CVEs

CRITICALCVE-2026-90924
CRITICALCVE-2026-97064PoC

Related by shared AI tags and CWE weakness class. Browse the full archive.