CVE Intelligence

Zyosoft vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Zyosoft products: 1 record(s), with severity, exploitation and fixes.

School App 1

Exploited only (KEV) →

CVE-2026-7491 High · 8.1 CWE-639 May 2, 2026
Zyosoft｜School App - Insecure Direct Object Reference
School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify a specific parameter to read and modify other users' data.