| TVN ID | TVN-202604013 |
|---|---|
| CVE ID | CVE-2026-7491 |
| CVSS | 8.1 (High) CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N |
| Affected Products | School App(Android) version before 1.1.62 School App(iOS) version before 2.7.2 |
| Description | School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify a specific parameter to read and modify other users' data. |
| Solution | Update School App (Android) to version 1.1.62 or later Update School App (iOS) to version 2.7.2 or later |
| Credit | shnien(CHT Security) |
| Public Date | 2026-04-30 |
:::