Is CVE-2026-9469 exploited in the wild?

No. Junglewise Threat Intelligence has no report of CVE-2026-9469 being exploited in the wild.

How severe is CVE-2026-9469?

High severity, with a CVSS score of 7.3, published 25 May 2026.

Which products and versions are affected?

Yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203.

Is there a fix for CVE-2026-9469?

No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

How is CVE-2026-9469 attacked?

It is attacked over the network, in a network appliance.

Am I affected by CVE-2026-9469?

Check whether you run Yashpokharna2555 StudentManagementSystem at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

CVE-2026-9469: yashpokharna2555 StudentManagementSystem SQL injection in success.php

CVE-2026-9469 · Severity: high · CVSS 7.3 · Published 2026-05-25

A security vulnerability exists in the StudentManagementSystem, a software tool used to manage large student records. An attacker can exploit this flaw to bypass security controls and potentially access or modify sensitive student data. This could lead to unauthorized data exposure and disruption of administrative operations.

Technologies: Yashpokharna2555 StudentManagementSystem. Vendors: Yashpokharna2555.

Quick answers

Is CVE-2026-9469 exploited in the wild?: No. Junglewise Threat Intelligence has no report of CVE-2026-9469 being exploited in the wild.
How severe is CVE-2026-9469?: High severity, with a CVSS score of 7.3, published 25 May 2026.
Which products and versions are affected?: Yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203.
Is there a fix for CVE-2026-9469?: No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.
How is CVE-2026-9469 attacked?: It is attacked over the network, in a network appliance.
Am I affected by CVE-2026-9469?: Check whether you run Yashpokharna2555 StudentManagementSystem at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

Technical details

A SQL injection vulnerability exists in the StudentManagementSystem (commit cb2f558) within the success.php file. The flaw is caused by improper neutralization of the 'User' argument, allowing an attacker to inject malicious SQL commands. This vulnerability can be exploited remotely without authentication to bypass login mechanisms or access sensitive database information. A public exploit has been disclosed, and the project currently uses a rolling release model with no official patch yet confirmed by the maintainer.

Affected products

yashpokharna2555 StudentManagementSystem cb2f558ddf8d19396de0f92abf2d224d46a0a203

Timeline

2026-05-25: advisory: NVD publication date
2026-05-25: disclosed: Public exploit made available

References

This page as Markdown. Free to reuse under CC BY 4.0 with a link back.