CVE-2026-91107 | OS4ED openSIS Classic 9.3 School Information Update Path staff_id privileges management

October 5, 2026 Yanac

A vulnerability was found in OS4ED openSIS Classic 9.3. It has been classified as critical. Affected by this vulnerability is an unknown functionality of the component School Information Update Path. The manipulation of the argument staff_id leads to improper privilege management.

This vulnerability is documented as CVE-2026-91107. The attack can be initiated remotely. There is not any exploit available.VulDB Recent EntriesRead More