Skip to content
CVE PROGRAM SOURCE RECORD8.6 High

CVE-2026-7491

Zyosoft|School App - Insecure Direct Object Reference

Description

School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify a specific parameter to read and modify other users' data.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Zyosoft School App

Default version status: unaffected

  • 0 to < 1.1.62affected

Zyosoft School App

Default version status: unaffected

  • 0 to < 2.7.2affected

References