CVE-2026-10619

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-10619", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "state": "PUBLISHED", "assignerShortName": "VulDB", "dateReserved": "2026-06-02T13:54:23.752Z", "datePublished": "2026-06-02T20:00:13.992Z", "dateUpdated": "2026-06-03T13:25:08.078Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-06-02T20:00:13.992Z"}, "title": "sayan365 student-management-system improper authentication", "problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-287", "lang": "en", "description": "Improper Authentication"}]}], "affected": [{"vendor": "sayan365", "product": "student-management-system", "versions": [{"version": "n/a", "status": "affected"}], "cpes": ["cpe:2.3:a:sayan365:student-management-system:*:*:*:*:*:*:*:*"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in sayan365 student-management-system up to 7f3c9ce7d410332335c2affac93a385485051800. This impacts an unknown function. The manipulation results in improper authentication. The attack can be executed remotely. The exploit is now public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet."}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P", "baseSeverity": "MEDIUM"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "HIGH"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.3, "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R", "baseSeverity": "HIGH"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "timeline": [{"time": "2026-06-02T00:00:00.000Z", "lang": "en", "value": "Advisory disclosed"}, {"time": "2026-06-02T02:00:00.000Z", "lang": "en", "value": "VulDB entry created"}, {"time": "2026-06-02T15:59:27.000Z", "lang": "en", "value": "VulDB entry last update"}], "credits": [{"lang": "en", "value": "ciyou (VulDB User)", "type": "reporter"}, {"lang": "en", "value": "VulDB CNA Team", "type": "coordinator"}], "references": [{"url": "https://vuldb.com/vuln/367927", "name": "VDB-367927 | sayan365 student-management-system improper authentication", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/367927/cti", "name": "VDB-367927 | CTI Indicators (IOB, IOC)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-10619", "name": "CVE-2026-10619 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/829545", "name": "Submit #829545 | sayan365 student-management-system 1.0 Unauthenticated Access", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/829562", "name": "Submit #829562 | sayan365 student-management-system 1.0 Unauthenticated Access (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/829566", "name": "Submit #829566 | sayan365 student-management-system 1.0 Unauthenticated Access (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/829567", "name": "Submit #829567 | sayan365 student-management-system 1.0 Unauthenticated Access (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/829568", "name": "Submit #829568 | sayan365 student-management-system 1.0 Unauthenticated Access (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/829569", "name": "Submit #829569 | sayan365 student-management-system 1.0 Unauthenticated Access (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://github.com/sayan365/student-management-system/issues/3", "tags": ["issue-tracking"]}, {"url": "https://github.com/sayan365/student-management-system/issues/4", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/sayan365/student-management-system/", "tags": ["product"]}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-06-03T13:24:35.650924Z", "id": "CVE-2026-10619", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-03T13:25:08.078Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-10619", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-06-03T13:24:35.650924Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-06-03T13:24:41.537Z"}}], "cna": {"title": "sayan365 student-management-system improper authentication", "credits": [{"lang": "en", "type": "reporter", "value": "ciyou (VulDB User)"}, {"lang": "en", "type": "coordinator", "value": "VulDB CNA Team"}], "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 6.9, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P"}}, {"cvssV3_1": {"version": "3.1", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV3_0": {"version": "3.0", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R"}}, {"cvssV2_0": {"version": "2.0", "baseScore": 7.5, "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:ND/RC:UR"}}], "affected": [{"cpes": ["cpe:2.3:a:sayan365:student-management-system:*:*:*:*:*:*:*:*"], "vendor": "sayan365", "product": "student-management-system", "versions": [{"status": "affected", "version": "n/a"}]}], "timeline": [{"lang": "en", "time": "2026-06-02T00:00:00.000Z", "value": "Advisory disclosed"}, {"lang": "en", "time": "2026-06-02T02:00:00.000Z", "value": "VulDB entry created"}, {"lang": "en", "time": "2026-06-02T15:59:27.000Z", "value": "VulDB entry last update"}], "references": [{"url": "https://vuldb.com/vuln/367927", "name": "VDB-367927 | sayan365 student-management-system improper authentication", "tags": ["vdb-entry"]}, {"url": "https://vuldb.com/vuln/367927/cti", "name": "VDB-367927 | CTI Indicators (IOB, IOC)", "tags": ["signature", "permissions-required"]}, {"url": "https://vuldb.com/cve/CVE-2026-10619", "name": "CVE-2026-10619 | CVE Analysis and Report", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/829545", "name": "Submit #829545 | sayan365 student-management-system 1.0 Unauthenticated Access", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/829562", "name": "Submit #829562 | sayan365 student-management-system 1.0 Unauthenticated Access (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/829566", "name": "Submit #829566 | sayan365 student-management-system 1.0 Unauthenticated Access (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/829567", "name": "Submit #829567 | sayan365 student-management-system 1.0 Unauthenticated Access (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/829568", "name": "Submit #829568 | sayan365 student-management-system 1.0 Unauthenticated Access (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://vuldb.com/submit/829569", "name": "Submit #829569 | sayan365 student-management-system 1.0 Unauthenticated Access (Duplicate)", "tags": ["third-party-advisory"]}, {"url": "https://github.com/sayan365/student-management-system/issues/3", "tags": ["issue-tracking"]}, {"url": "https://github.com/sayan365/student-management-system/issues/4", "tags": ["exploit", "issue-tracking"]}, {"url": "https://github.com/sayan365/student-management-system/", "tags": ["product"]}], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in sayan365 student-management-system up to 7f3c9ce7d410332335c2affac93a385485051800. This impacts an unknown function. The manipulation results in improper authentication. The attack can be executed remotely. The exploit is now public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-287", "description": "Improper Authentication"}]}], "providerMetadata": {"orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB", "dateUpdated": "2026-06-02T20:00:13.992Z"}}}, "cveMetadata": {"cveId": "CVE-2026-10619", "state": "PUBLISHED", "dateUpdated": "2026-06-03T13:25:08.078Z", "dateReserved": "2026-06-02T13:54:23.752Z", "assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "datePublished": "2026-06-02T20:00:13.992Z", "assignerShortName": "VulDB"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"cpes": ["cpe:2.3:a:sayan365:student-management-system:*:*:*:*:*:*:*:*"], "product": "student-management-system", "vendor": "sayan365", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cna@vuldb.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was detected in sayan365 student-management-system up to 7f3c9ce7d410332335c2affac93a385485051800. This impacts an unknown function. The manipulation results in improper authentication. The attack can be executed remotely. The exploit is now public and may be used. This product implements a rolling release for ongoing delivery, which means version information for affected or updated releases is unavailable. Multiple endpoints are affected. The project was informed of the problem early through an issue report but has not responded yet."}, {"lang": "es", "value": "Se detect\u00f3 una vulnerabilidad en el sistema de gesti\u00f3n estudiantil sayan365 hasta 7f3c9ce7d410332335c2affac93a385485051800. Esto afecta a una funci\u00f3n desconocida. La manipulaci\u00f3n resulta en una autenticaci\u00f3n impropia. El ataque puede ejecutarse remotamente. El exploit ahora es p\u00fablico y puede ser utilizado. Este producto implementa un lanzamiento continuo para la entrega continua, lo que significa que la informaci\u00f3n de la versi\u00f3n para las versiones afectadas o actualizadas no est\u00e1 disponible. M\u00faltiples puntos finales est\u00e1n afectados. El proyecto fue informado del problema con antelaci\u00f3n a trav\u00e9s de un informe de incidencia, pero a\u00fan no ha respondido."}], "id": "CVE-2026-10619", "lastModified": "2026-07-22T19:10:00.120", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "HIGH", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "PARTIAL", "baseScore": 7.5, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 6.4, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "cna@vuldb.com", "type": "Secondary", "userInteractionRequired": false}], "cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.4, "source": "cna@vuldb.com", "type": "Secondary"}], "cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.5, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "PROOF_OF_CONCEPT", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "NONE", "subIntegrityImpact": "NONE", "userInteraction": "NONE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "LOW", "vulnConfidentialityImpact": "LOW", "vulnIntegrityImpact": "LOW", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "cna@vuldb.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-10619", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-06-03T13:24:35.650924Z", "version": "2.0.3"}}]}, "published": "2026-06-02T21:16:26.180", "references": [{"source": "cna@vuldb.com", "url": "https://github.com/sayan365/student-management-system/"}, {"source": "cna@vuldb.com", "url": "https://github.com/sayan365/student-management-system/issues/3"}, {"source": "cna@vuldb.com", "url": "https://github.com/sayan365/student-management-system/issues/4"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/cve/CVE-2026-10619"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/829545"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/829562"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/829566"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/829567"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/829568"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/submit/829569"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/367927"}, {"source": "cna@vuldb.com", "url": "https://vuldb.com/vuln/367927/cti"}], "sourceIdentifier": "cna@vuldb.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-287"}], "source": "cna@vuldb.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "code_commit", "value": "7f3c9ce7d410332335c2affac93a385485051800"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "student-management-system", "vendor": "sayan365"}], "created": "2026-06-03T04:00:13.043423+00:00", "updated": "2026-06-03T10:54:50.864293+00:00", "vendors": ["sayan365", "sayan365$PRODUCT$student-management-system"]}