A vulnerability was detected in sambitraj Student-Management-System up to 56ba287f2e9031523ccb4244cb6e3fe530e4e5d5. (CVE-2026-82698)

CVE-2026-82698 is a vulnerability in the sambitraj Student-Management-System affecting an unknown function in the aca.sql file. Exploiting this vulnerability allows an attacker to trigger the use of a default password, potentially enabling unauthorized remote access. The vulnerability has a CVSS 3.1 base score of 5.3 (medium severity) with network attack vector, low attack complexity, no privileges required, no user interaction, and limited confidentiality impact. The product follows a rolling release approach, and no specific affected or fixed versions are identified. The vendor has been informed but has not provided a fix or response. Public exploit code is available, increasing the risk of exploitation.

The vulnerability allows remote attackers to cause the system to use a default password, which may lead to unauthorized access with limited confidentiality impact. There is no impact on integrity or availability reported. The presence of public exploit code increases the likelihood of exploitation, but no known active exploitation in the wild has been reported.

No official patch or fix is currently available, and the vendor has not responded to the issue report. Users should monitor the vendor's communications for updates. Until a fix is provided, consider restricting network access to the affected system and applying compensating controls to limit exposure. Patch status is not yet confirmed—check the vendor advisory for current remediation guidance.