CVE-2026-116010 | francoisjacquet RosarioSIS up to 12.9.0 MakeReferral.php st_arr/values/attendance improper authorization

October 24, 2026 Yanac

A vulnerability, which was classified as critical, has been found in francoisjacquet RosarioSIS up to 12.9.0. This impacts an unknown function of the file MakeReferral.php. Performing a manipulation of the argument st_arr/values/attendance results in improper authorization.

This vulnerability is known as CVE-2026-116010. Remote exploitation of the attack is possible. No exploit is available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More