zhistaredu has 7 CVEs on record. Disclosure cadence is accelerating: 7 in the last 90 days against 0 in the 90 before. The busiest recent month was September 2026 with 7. The median CVSS is 5.3 (medium). None have a confirmed exploitation report.
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 5.3
- Publish → KEV
- —
- Last 90 days
- 7 prev 0
Worst active — by depth score
CVE-2026-97878High· 7.3A vulnerability was identified in zhistaredu StarTraining up to 3.8.152CVE-2026-97877High· 7.3A vulnerability was determined in zhistaredu StarTraining up to 3.8.152CVE-2026-100878Medium· 6.3A vulnerability was identified in zhistaredu StarTraining up to 3.8.147CVE-2026-97879Medium· 5.3A security flaw has been discovered in zhistaredu StarTraining up to 3.8.141CVE-2026-100879Medium· 4.3A security flaw has been discovered in zhistaredu StarTraining up to 3.8.136
zhistaredu vulnerabilities
CVEs affecting zhistaredu, newest first. Open any entry for full detail, references, and exploit status.
7 CVEsRSS
CVE-2026-100881Low· 2.6PoCA security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1
A security vulnerability has been detected in zhistaredu StarTraining up to 3.8.1. This issue affects some unknown processing of the file application.yml. Such manipulation of the argument xss.enabled leads to cross site scripting. It is…
CVE-2026-100880Low· 3.5PoCA weakness has been identified in zhistaredu StarTraining up to 3.8.1
A weakness has been identified in zhistaredu StarTraining up to 3.8.1. This vulnerability affects unknown code of the file du-common/src/main/java/com/edu/common/utils/file/MimeTypeUtils.java of the component Upload Endpoint. This manipu…
CVE-2026-100878Medium· 6.3PoCA vulnerability was identified in zhistaredu StarTraining up to 3.8.1
A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Affected by this issue is the function SysUser.isAdmin of the file edu-common/src/main/java/com/edu/common/core/domain/entity/SysUser.java of the component authRole E…
CVE-2026-100879Medium· 4.3PoCA security flaw has been discovered in zhistaredu StarTraining up to 3.8.1
A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. This affects the function checkRoleAllowed of the file SysRoleServiceImpl.java of the component dataScope Endpoint. The manipulation results in missing authoriza…
CVE-2026-97877High· 7.3PoCA vulnerability was determined in zhistaredu StarTraining up to 3.8.1
A vulnerability was determined in zhistaredu StarTraining up to 3.8.1. This issue affects the function UserLoginService.createToken of the file application.yml of the component JWT Token Handler. This manipulation of the argument user_id…
CVE-2026-97878High· 7.3PoCA vulnerability was identified in zhistaredu StarTraining up to 3.8.1
A vulnerability was identified in zhistaredu StarTraining up to 3.8.1. Impacted is the function anonymous of the file /druid/index.html of the component Druid Console. Such manipulation leads to missing authentication. The attack may be …
CVE-2026-97879Medium· 5.3PoCA security flaw has been discovered in zhistaredu StarTraining up to 3.8.1
A security flaw has been discovered in zhistaredu StarTraining up to 3.8.1. The affected element is an unknown function of the file SecurityConfig.java of the component api-docs Endpoint. Performing a manipulation results in missing auth…