{"schema_version":1,"title":"OS4ED openSIS Classic vulnerabilities","summary":"Junglewise Threat Intelligence has tracked 8 vulnerabilities in OS4ED openSIS Classic: 0 in the last 7 days and 6 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-91107, was published on 5 October 2026. Nothing in the last four weeks, down from 6 vulnerabilities in the four before.","url":"https://junglewise.ai/threats/technologies/opensis-classic","json_url":"https://junglewise.ai/threats/technologies/opensis-classic.json","publisher":"Junglewise Threat Intelligence","license":"CC-BY-4.0","license_url":"https://creativecommons.org/licenses/by/4.0/","attribution":"Junglewise Threat Intelligence, https://junglewise.ai/threats/technologies/opensis-classic","sources":"NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories","kind":"technology","thin":true,"counts":{"high":0,"all_time":8,"critical":0,"exploited":0,"last_7_days":0,"last_30_days":0,"last_90_days":6,"last_365_days":8},"latest":[{"cve":"CVE-2026-91107","slug":"cve-2026-91107-opensis-classic-9-3-allows-an-authenticated-user-with-the-built","title":"openSIS Classic insecure direct object reference in staff password reset","severity":"info","exploited":false,"published_at":"2026-10-05T22:16:58.657+00:00","url":"https://junglewise.ai/threats/cve-2026-91107-opensis-classic-9-3-allows-an-authenticated-user-with-the-built"},{"cve":"CVE-2026-103117","cvss":4.7,"slug":"cve-2026-103117-a-security-vulnerability-has-been-detected-in-os4ed-opensis","title":"OS4ED openSIS-Classic SQL injection in Save Data Handler","severity":"medium","exploited":false,"published_at":"2026-09-30T13:17:18.28+00:00","url":"https://junglewise.ai/threats/cve-2026-103117-a-security-vulnerability-has-been-detected-in-os4ed-opensis"},{"cve":"CVE-2026-103116","cvss":6.3,"slug":"cve-2026-103116-a-weakness-has-been-identified-in-os4ed-opensis-classic-up-to-9","title":"OS4ED openSIS-Classic SQL injection in student list search","severity":"medium","exploited":false,"published_at":"2026-09-30T13:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-103116-a-weakness-has-been-identified-in-os4ed-opensis-classic-up-to-9"},{"cve":"CVE-2026-103115","cvss":6.3,"slug":"cve-2026-103115-a-security-flaw-has-been-discovered-in-os4ed-opensis-classic-up","title":"OS4ED openSIS-Classic SQL injection in Student Search","severity":"medium","exploited":false,"published_at":"2026-09-30T13:17:17.91+00:00","url":"https://junglewise.ai/threats/cve-2026-103115-a-security-flaw-has-been-discovered-in-os4ed-opensis-classic-up"},{"cve":"CVE-2026-103114","cvss":6.3,"slug":"cve-2026-103114-a-vulnerability-was-identified-in-os4ed-opensis-classic-up-to-9","title":"OS4ED openSIS-Classic SQL injection in Assignment Management","severity":"medium","exploited":false,"published_at":"2026-09-30T12:17:12.457+00:00","url":"https://junglewise.ai/threats/cve-2026-103114-a-vulnerability-was-identified-in-os4ed-opensis-classic-up-to-9"},{"cve":"CVE-2026-103113","cvss":4.7,"slug":"cve-2026-103113-a-vulnerability-was-determined-in-os4ed-opensis-classic-up-to-9","title":"OS4ED openSIS-Classic SQL injection in student fields","severity":"medium","exploited":false,"published_at":"2026-09-30T11:16:43.33+00:00","url":"https://junglewise.ai/threats/cve-2026-103113-a-vulnerability-was-determined-in-os4ed-opensis-classic-up-to-9"},{"cve":"CVE-2026-11944","cvss":5.3,"slug":"cve-2026-11944-os4ed-opensis-classic-path-traversal-in-messaging-attachment","title":"OS4ED openSIS Classic path traversal in messaging attachment download","severity":"info","exploited":false,"published_at":"2026-07-14T16:16:44.917+00:00","url":"https://junglewise.ai/threats/cve-2026-11944-os4ed-opensis-classic-path-traversal-in-messaging-attachment"},{"cve":"CVE-2026-8406","cvss":7.1,"slug":"cve-2026-8406-os4ed-opensis-classic-idor-in-messaging-module","title":"OS4ED openSIS Classic IDOR in messaging module","severity":"info","exploited":false,"published_at":"2026-06-11T14:16:32.93+00:00","url":"https://junglewise.ai/threats/cve-2026-8406-os4ed-opensis-classic-idor-in-messaging-module"}],"weekly":[{"week":"2026-08-17","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-24","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-08-31","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-07","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-14","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-21","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-09-28","critical":0,"exploited":0,"vulnerabilities":5},{"week":"2026-10-05","critical":0,"exploited":0,"vulnerabilities":1},{"week":"2026-10-12","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-19","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-10-26","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-02","critical":0,"exploited":0,"vulnerabilities":0},{"week":"2026-11-09","critical":0,"exploited":0,"vulnerabilities":0}],"related":[],"technology":{"hub":true,"name":"OS4ED openSIS Classic","slug":"opensis-classic","vendor":{"hub":true,"name":"OS4ED","slug":"os4ed","url":"https://junglewise.ai/threats/vendors/os4ed"},"aliases":[],"category":"cms","homepage":"https://opensis.com/","repo_url":"https://github.com/OS4ED/opensis-classic","description":"An open-source student information system designed for K-12 and higher education institutions.","url":"https://junglewise.ai/threats/technologies/opensis-classic"},"most_severe":[{"cve":"CVE-2026-103116","cvss":6.3,"slug":"cve-2026-103116-a-weakness-has-been-identified-in-os4ed-opensis-classic-up-to-9","title":"OS4ED openSIS-Classic SQL injection in student list search","severity":"medium","exploited":false,"published_at":"2026-09-30T13:17:18.09+00:00","url":"https://junglewise.ai/threats/cve-2026-103116-a-weakness-has-been-identified-in-os4ed-opensis-classic-up-to-9"},{"cve":"CVE-2026-103115","cvss":6.3,"slug":"cve-2026-103115-a-security-flaw-has-been-discovered-in-os4ed-opensis-classic-up","title":"OS4ED openSIS-Classic SQL injection in Student Search","severity":"medium","exploited":false,"published_at":"2026-09-30T13:17:17.91+00:00","url":"https://junglewise.ai/threats/cve-2026-103115-a-security-flaw-has-been-discovered-in-os4ed-opensis-classic-up"},{"cve":"CVE-2026-103114","cvss":6.3,"slug":"cve-2026-103114-a-vulnerability-was-identified-in-os4ed-opensis-classic-up-to-9","title":"OS4ED openSIS-Classic SQL injection in Assignment Management","severity":"medium","exploited":false,"published_at":"2026-09-30T12:17:12.457+00:00","url":"https://junglewise.ai/threats/cve-2026-103114-a-vulnerability-was-identified-in-os4ed-opensis-classic-up-to-9"},{"cve":"CVE-2026-103117","cvss":4.7,"slug":"cve-2026-103117-a-security-vulnerability-has-been-detected-in-os4ed-opensis","title":"OS4ED openSIS-Classic SQL injection in Save Data Handler","severity":"medium","exploited":false,"published_at":"2026-09-30T13:17:18.28+00:00","url":"https://junglewise.ai/threats/cve-2026-103117-a-security-vulnerability-has-been-detected-in-os4ed-opensis"},{"cve":"CVE-2026-103113","cvss":4.7,"slug":"cve-2026-103113-a-vulnerability-was-determined-in-os4ed-opensis-classic-up-to-9","title":"OS4ED openSIS-Classic SQL injection in student fields","severity":"medium","exploited":false,"published_at":"2026-09-30T11:16:43.33+00:00","url":"https://junglewise.ai/threats/cve-2026-103113-a-vulnerability-was-determined-in-os4ed-opensis-classic-up-to-9"},{"cve":"CVE-2026-8406","cvss":7.1,"slug":"cve-2026-8406-os4ed-opensis-classic-idor-in-messaging-module","title":"OS4ED openSIS Classic IDOR in messaging module","severity":"info","exploited":false,"published_at":"2026-06-11T14:16:32.93+00:00","url":"https://junglewise.ai/threats/cve-2026-8406-os4ed-opensis-classic-idor-in-messaging-module"},{"cve":"CVE-2026-11944","cvss":5.3,"slug":"cve-2026-11944-os4ed-opensis-classic-path-traversal-in-messaging-attachment","title":"OS4ED openSIS Classic path traversal in messaging attachment download","severity":"info","exploited":false,"published_at":"2026-07-14T16:16:44.917+00:00","url":"https://junglewise.ai/threats/cve-2026-11944-os4ed-opensis-classic-path-traversal-in-messaging-attachment"},{"cve":"CVE-2026-91107","slug":"cve-2026-91107-opensis-classic-9-3-allows-an-authenticated-user-with-the-built","title":"openSIS Classic insecure direct object reference in staff password reset","severity":"info","exploited":false,"published_at":"2026-10-05T22:16:58.657+00:00","url":"https://junglewise.ai/threats/cve-2026-91107-opensis-classic-9-3-allows-an-authenticated-user-with-the-built"}],"generated_at":"2026-11-09T03:07:00.176479+00:00"}