CVE-2026-82621
Soarkey StudentManagement/学生信息管理系统 Administrative Servlet AdminDao.java AdminDao.doGet authorization
CVSS Score
7.3
EPSS Score
0.0%
EPSS Percentile
0th
A weakness has been identified in Soarkey StudentManagement and 学生信息管理系统 up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. This impacts the function AdminDao.doGet of the file code/src/service/AdminDao.java of the component Administrative Servlet. Executing a manipulation of the argument action can lead to authorization bypass. It is possible to launch the attack remotely. The exploit has been made available to the public and could be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.
| CWE | CWE-639 CWE-285 |
| Vendor | soarkey |
| Product | studentmanagement |
| Published | Aug 31, 2026 |
Stay Ahead of the Next One
Get instant alerts for soarkey studentmanagement
Be the first to know when new high vulnerabilities affecting soarkey studentmanagement are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:X/RC:R Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Affected Versions
Soarkey / StudentManagement
e08f7f1d5015af407aa4cca0ada3dea189b4937e
Soarkey / 学生信息管理系统
e08f7f1d5015af407aa4cca0ada3dea189b4937e
References
vuldb.com: https://vuldb.com/vuln/397121 vuldb.com: https://vuldb.com/vuln/397121/cti vuldb.com: https://vuldb.com/cve/CVE-2026-82621 vuldb.com: https://vuldb.com/submit/893104 github.com: https://github.com/Soarkey/StudentManagement/issues/32 github.com: https://github.com/Soarkey/StudentManagement/
Credits
🔍 soulinda (VulDB User) VulDB CNA Team