CVE-2026-91107Critical· 9.3▾ MidnightopenSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staff_id and cause the School Information update path to reset that selected account's password.
▾ Midnight zone — Critical, or high with PoC / in-the-wild
impact 51.2 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Exploit-prediction probability, daily snapshots since Oct 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.2%
openSIS Classic 9.3 allows an authenticated user with the built-in teacher role can select an arbitrary staff record through staff_id and cause the School Information update path to reset that selected account's password.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-103117Medium· 4.7A security vulnerability has been detected in OS4ED openSIS-Classic up to 9.3
CVE-2026-103115Medium· 6.3A security flaw has been discovered in OS4ED openSIS-Classic up to 9.3
CVE-2026-103116Medium· 6.3A weakness has been identified in OS4ED openSIS-Classic up to 9.3
CVE-2026-103114Medium· 6.3A vulnerability was identified in OS4ED openSIS-Classic up to 9.3
CVE-2026-103113Medium· 4.7A vulnerability was determined in OS4ED openSIS-Classic up to 9.3
CVE-2025-12288Medium· 4.3A vulnerability was detected in Bdtask Pharmacy Management System up to 9.4