Export limit exceeded: 425852 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-75458

Vertical Privilege Escalation via Teacher Deletion Endpoint

The teacher-end interface POST /api/teacher/user/delete/{id} in XueZhiSi Open Source Exam System <= 3.9.0 contains a vertical privilege escalatio vulnerability. This interface accepts a user ID and then executes getUserById(id), setDeleted(true), updateByIdFilter() in sequence, without any validation of whether the current user has the authority to delete the target user. An authenticated teacher user (role=2) can delete an administrator account (role=3), constituting a vertical privilege escalation where a lower-privileged user performs a high-privileged operation.

CVSS 3.1 · 8.1 High EPSS < 1% KEV · Not listed
Vendors
Xuezhisi
Products
Open Source Exam System
CVE-2026-75460

Teacher API Role Parameter Control Enables Privilege Escalation

XueZhiSi Open Source Exam System <= 3.9.0 has a privilege escalation vulnerability in the teacher-end interface POST /api/teacher/user/page/list. The role parameter in UserPageRequestVM is fully controllable by the requester.

CVSS 3.1 · 6.5 Medium EPSS < 1% KEV · Not listed
Vendors
Xuezhisi
Products
Open Source Exam System