Skip to content
CVE PROGRAM SOURCE RECORD9.3 Critical

CVE-2026-25753

PlaciPy has a Hard-Coded Default Password for All Student Accounts (Account Takeover)

Description

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application uses a hard-coded, static default password for all newly created student accounts. This results in mass account takeover, allowing any attacker to log in as any student once the password is known.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Praskla-Technology assessment-placipy

  • <= 1.0.0affected

References