{"uuid": "4d39f153-ecb8-4f28-8fe7-e0a1550dcc36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2026-91107", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/117392082453538163", "content": "CVE-2026-91107: CRITICAL auth bypass in openSIS-Classic 9.3 \ud83d\uded1. Teacher-role users can reset passwords of any staff via the staff_id parameter. No patch yet \u2014 restrict permissions & monitor password changes. https://radar.offseq.com/threat/cve-2026-91107-cwe-639-authorization-bypass-through-user-controlled-key-in-os4ed-opensis-classic-f7eb55a7a5a0f52d #OffSeq #Vulnerability #openSIS #CVE202691107", "creation_timestamp": "2026-10-06T04:30:24.483722Z"}