CVE-2026-86672: Information Disclosure in ningzichun Student Management System

This vulnerability in ningzichun Student Management System up to commit 98760f5711cf6dc8b4adca53a9e207ca49b02ebf involves an information disclosure flaw in an unspecified function related to the Backup Handler component's example.7z file. The flaw allows remote attackers to obtain sensitive information without any privileges or user interaction. The system uses continuous delivery with rolling releases, so no explicit version numbers are provided for affected or fixed releases. The vendor has not yet responded to the issue report. The CVSS 4.0 base score is 6.9, indicating medium severity.

An attacker can remotely exploit this vulnerability to disclose sensitive information from the system without requiring authentication or user interaction. This could lead to exposure of confidential data managed by the Student Management System. No further impact details or exploitation in the wild have been reported.

No official fix or patch has been released yet, and the vendor has not responded to the issue report. Patch status is not yet confirmed — check the vendor advisory or project updates for current remediation guidance. Until a fix is available, consider restricting remote access to the affected system and monitor for any suspicious activity related to information disclosure.