Authentication Bypass in ealpha072 Student-Management-System (CVE-2026-10777, CVSS 7.3)

Summary

Authentication bypass in ealpha072 Student-Management-System (CVE-2026-10777). Risk of unauthorized operations or information disclosure.

Original description

The description as published by the source.

A vulnerability was identified in ealpha072 Student-Management-System up to 01451bd7a2f58cdda07bd0b86e3967582e3ecd08. Affected by this issue is some unknown functionality of the file admin/config.php of the component Administrative Backend. Such manipulation leads to improper authentication. The attack may be performed from remote. The exploit is publicly available and might be used. This product utilizes a rolling release system for continuous delivery, and as such, version information for affected or updated releases is not disclosed. The project was informed of the problem early through an issue report but has not responded yet.

Source: NIST National Vulnerability Database NVD GitHub Advisory

AI summary

Written by an external AI model and may contain mistakes. Check the original description and references below before acting on it.

ealpha072の学生管理システムの管理バックエンドにおけるCVE-2026-10777は、ファイルadmin/config.phpの未知の機能が原因で、不適切な認証が発生する脆弱性です。この脆弱性はリモートから攻撃が可能で、公開されたエクスプロイトが存在します。このプロジェクトはローリングリリースを使用しており、影響を受けるバージョンや更新情報は公開されていません。開発チームは報告を受けていますが、まだ応答がありません。

❓ What is the problem

ealpha072の管理システムの不適切な認証の脆弱性。

📍 Affected scope

ファイルadmin/config.php内の未知の機能。

🔥 Severity

リモートから攻撃が可能で、悪用される可能性が高い。

🔧 How to fix

情報なし

🛡️ Workaround

情報なし

🔍 Detection

情報なし

Authentication Bypass in ealpha072 Student-Management-System (CVE-2026-10777)

Summary

Original description

AI summary

References