CVE-2026-124502 | yungifez Skuul School Management System up to 2.6.3 Delete GraduationController.php resetGraduation student authorization

A vulnerability labeled as problematic has been found in yungifez Skuul School Management System up to 2.6.3. Affected by this vulnerability is the function GraduationController::resetGraduation of the file app/Http/Controllers/GraduationController.php of the component Delete Handler. Such manipulation of the argument student leads to missing authorization.

This vulnerability is documented as CVE-2026-124502. The attack can be executed remotely. Additionally, an exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More