{"id":"CVE-2026-91107","published":"2026-10-05T22:16:58.657","lastModified":"2026-10-06T15:08:38.397","description":"openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staff_id and cause the School Information update path to reset that selected account's password.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":["CWE-639"],"vendors":[],"products":[],"references":[{"url":"https://fluidattacks.com/advisories/hearts","tags":[]},{"url":"https://github.com/OS4ED/openSIS-Classic","tags":[]},{"url":"https://github.com/OS4ED/openSIS-Classic/commit/24bb530391a67c114cd4fe3dff65da7e070f5ed1","tags":[]}],"exploitRefs":[{"url":"https://github.com/OS4ED/openSIS-Classic","tags":[]},{"url":"https://github.com/OS4ED/openSIS-Classic/commit/24bb530391a67c114cd4fe3dff65da7e070f5ed1","tags":[]}],"hasPoc":true,"ai":null}