{"id":"CVE-2026-117028","kind":"vulnerability","aliases":["CVE-2026-117028"],"related":[],"title":"Skuul School Management System: students can read other students' exam results","description":"Skuul School Management System through version 2.6.5 is vulnerable to incorrect access control in the ResultChecker::checkResult method. An authenticated student can manipulate the studentId parameter to retrieve another student's examination results, including examination marks, without authorization.","summary":"Skuul School Management System through version 2.6.5 has an access control flaw in its ResultChecker::checkResult method. A logged-in student can change the studentId parameter to view another student's examination results and marks.","severity":"medium","cvss":null,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["other","school-management","self-hosted","skuul"],"not_affected_if":["auth-required"],"how_to_check":"- Confirm whether the deployment runs Skuul School Management System and its version, which is `2.6.5` or earlier if affected\n- Review whether the result-checking function enforces that the requested studentId matches the logged-in user (unknown from the sources)","fix":null,"status":"open","published_at":"2026-10-30T14:16:39+00:00","first_seen_at":"2026-10-30T14:30:53+00:00","triaged_at":"2026-10-30T14:33:09+00:00","updated_at":"2026-10-30T14:33:09+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-30T14:33:09Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"Skuul School Management System: students can read other students' exam results","impact":"medium","summary":"Skuul School Management System through version 2.6.5 has an access control flaw in its ResultChecker::checkResult method. A logged-in student can change the studentId parameter to view another student's examination results and marks.","audience":"businesses","category":"other","nicknames":[],"who_cares":["skuul","school-management","self-hosted"],"confidence":0.6,"fix_status":"unknown","needs_auth":"yes","worst_case":"student can read other students' exam marks","analyst_note":"Check the NVD entry and vendor sources for the fixed version and whether the endpoint is reachable without special configuration.","how_to_check":"- Confirm whether the deployment runs Skuul School Management System and its version, which is `2.6.5` or earlier if affected\n- Review whether the result-checking function enforces that the requested studentId matches the logged-in user (unknown from the sources)","plain_action":"","needs_analyst":true,"not_affected_if":["auth-required"],"who_is_affected":"Schools or organisations that run Skuul School Management System through version 2.6.5 with student logins are exposed, since the flaw requires an authenticated student account. Installations on a newer version, or those without student accounts, are not described as affected by the sources.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"medium"},"cost_usd":0.000658,"input_tokens":4099,"output_tokens":497,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-117028':14A,17A '-2026':13A,16A '2.6.5':32B,68C 'access':35B,73C 'anoth':55B,90C 'authent':81C 'author':99C 'chang':49B 'checkresult':41B,78C 'control':36B,74C 'cve':12A,15A 'exam':10A 'examin':58B,93C,96C 'flaw':37B 'host':24B 'includ':95C 'incorrect':72C 'log':45B 'logged-in':44B 'manag':3A,21B,28B,64C 'manipul':84C 'mark':61B,97C 'method':42B,79C 'paramet':52B,87C 'read':7A 'result':11A,59B,94C 'resultcheck':40B,77C 'retriev':89C 'school':2A,20B,27B,63C 'school-manag':19B 'self':23B 'self-host':22B 'skuul':1A,25B,26B,62C 'student':5A,9A,47B,56B,82C,91C 'studentid':51B,86C 'system':4A,29B,65C 'version':31B,67C 'view':54B 'vulner':70C 'without':98C","nicknames":[],"mitigations":[],"who_affected":"Schools or organisations that run Skuul School Management System through version 2.6.5 with student logins are exposed, since the flaw requires an authenticated student account. Installations on a newer version, or those without student accounts, are not described as affected by the sources.","tier":"C","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"businesses","plain_action":null,"first_public_at":"2026-10-30T14:16:39+00:00","kev":null,"cvss_vector":null,"cvss_by":null,"poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-117028","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-117028","severity":null,"published_at":"2026-10-30T14:16:39+00:00","modified_at":"2026-10-30T14:16:39+00:00","first_seen_at":"2026-10-30T14:30:53+00:00","fetched_at":"2026-10-30T14:30:53+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}