CVE-2026-7491 - Vulnerability Analysis

Overview

Zyosoft School App contains a broken access control caused by insecure direct object reference, letting authenticated remote attackers read and modify other users' data, exploit requires authentication.

Severity & Score

Impact

Authenticated attackers can read and modify other users' data, leading to data tampering and information disclosure.

Mitigation

Update to the latest version with access control fixes.

References

• https://www.twcert.org.tw/en/cp-139-10897-64257-2.html
• https://www.twcert.org.tw/tw/cp-132-10896-e3240-1.html

Related Resources

• Vulnerability Intelligence Dashboard
• Credential Scanner