CVE-2026-11944
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk30th percentile - higher than 30% of all known CVEs
Summary
A path traversal vulnerability in the legacy messaging sent-mail attachment download functionality of openSIS Classic 9.3 allows an authenticated attacker to read arbitrary files on the server via crafted path traversal sequences.
Risk Assessment
An authenticated attacker can access sensitive system files, configuration files, or other users' data, leading to information disclosure and potential attack escalation.
Recommendation
Immediately update openSIS Classic to the latest patched version and restrict access to the messaging functionality to trusted users only.
Other vulnerabilities in openSIS Classic
See all- CVE-2026-91107Critical
openSIS Classic 9.3 allows an authenticated user with the built-in teacher role to select an arbitrary staff record through staff_id and cause the School Information update path to reset that selected account's password.
- CVE-2026-103113Medium
In OS4ED openSIS-Classic up to version 9.3, the save action function in modules/students/Student.php (General Information Tab component) is vulnerable to SQL injection via manipulation of the students argument. The attack can be performed remotely. The exploit has been publicly disclosed and may be utilized. The project was informed but has not responded.
Original NVD description (English source)
openSIS Classic 9.3 contains an authenticated path traversal vulnerability in the legacy messaging sent-mail attachment download functionality that allows an authenticated attacker to read arbitrary files on the server via crafted path traversal sequences.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS