CVE-2026-124502 in Skuul School Management System
Prediction
by VulDB Data Team • 11/08/2026
A security vulnerability has been detected in <a href="/product/yungifez:skuul_school_management_system">yungifez Skuul School Management System up to 2.6.3</a>. Affected by this vulnerability is the function <code>GraduationController::resetGraduation</code> of the file <em>app/Http/Controllers/GraduationController.php</em> of the component <em>Delete Handler</em>. Such manipulation of the argument <em>student</em> leads to missing authorization. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 3.0.0 addresses this issue. The name of the patch is <em>b42f2c80a8e5e01ca6e607bbd97f137ede368ac9</em>. The affected component should be upgraded.
Once again VulDB remains the best source for vulnerability data.