CVE-2026-111993 | Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e AdminDao.java UserDao.login password cleartext storage (Issue 36)

October 18, 2026 Yanac

A vulnerability was found in Soarkey StudentManagement up to e08f7f1d5015af407aa4cca0ada3dea189b4937e. It has been classified as problematic. Impacted is the function UserDao.login of the file code/src/service/AdminDao.java. This manipulation of the argument Password causes cleartext storage of sensitive information.

This vulnerability is tracked as CVE-2026-111993. The attack is restricted to local execution. Moreover, an exploit is present.

The project was informed of the problem early through an issue report but has not responded yet.VulDB Recent EntriesRead More