CyberTutor vulnerabilities

🔔 Create alert RSS

Published CVEs affecting CyberTutor products: 2 record(s), with severity, exploitation and fixes.

NewSiteServer (NSS) 2

Exploited only (KEV) →

CVE-2026-19853 Medium · 5.3 CWE-306 Aug 24, 2026

CyberTutor｜NewSiteServer (NSS) - Missing Authentication

NewSiteServer (NSS) developed by CyberTutor has a Missing Authentication vulnerability. Unauthenticated remote attackers can exploit a specific functionality to send emails to anyone on behalf of the school.

CVE-2026-19852 Medium · 6.1 CWE-434 Aug 24, 2026

CyberTutor｜NewSiteServer (NSS) - Arbitrary File Upload

NewSiteServer (NSS) developed by CyberTutor has an Arbitrary File Upload vulnerability. Unauthenticated remote attackers can upload arbitrary files, including malicious HTML files, thereby achieving effects similar to cross-site scripting.