{"id":"CVE-2026-117028","published":"2026-10-30T14:16:39.553","lastModified":"2026-10-30T19:39:14.897","description":"Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An authenticated student can manipulate the studentId parameter to retrieve another student's examination results, including examination marks, without authorization.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://github.com/dollarboysushil/cve/blob/main/CVE-2026-117028.md","tags":[]},{"url":"https://github.com/yungifez/skuul","tags":[]}],"exploitRefs":[{"url":"https://github.com/dollarboysushil/cve/blob/main/CVE-2026-117028.md","tags":[]},{"url":"https://github.com/yungifez/skuul","tags":[]}],"hasPoc":true,"ai":null}