CVE-2026-75458 | MindSkip XueZhiSi up to 3.9.0 Teacher End Interface /api/teacher/user/delete updateByIdFilter ID privileges management

August 31, 2026 Yanac

A vulnerability classified as problematic was found in MindSkip XueZhiSi up to 3.9.0. This affects the function updateByIdFilter of the file /api/teacher/user/delete of the component Teacher End Interface. Executing a manipulation of the argument ID can lead to improper privilege management.

This vulnerability is tracked as CVE-2026-75458. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More