CVE-2026-19853
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk26th percentile - higher than 26% of all known CVEs
Summary
NewSiteServer (NSS) developed by CyberTutor has a Missing Authentication vulnerability. Unauthenticated remote attackers can exploit a specific functionality to send emails to anyone on behalf of the school.
Risk Assessment
Attackers can impersonate the school and send fraudulent emails, potentially leading to phishing or loss of trust. The organization is at risk of reputational and legal consequences.
Recommendation
Implement authentication mechanisms for all functions immediately and restrict access to sensitive features.
Other vulnerabilities in NewSiteServer
Original NVD description (English source)
NewSiteServer (NSS) developed by CyberTutor has a Missing Authentication vulnerability. Unauthenticated remote attackers can exploit a specific functionality to send emails to anyone on behalf of the school.