CVE-2026-75460

MediumCVSS 6.5

Published: 31/08/2026(UTC)Updated: 01/09/2026(UTC)Translated: 01/09/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

XueZhiSi Open Source Exam System <= 3.9.0 has a privilege escalation vulnerability in the teacher-end interface POST /api/teacher/user/page/list. The role parameter in UserPageRequestVM is fully controllable by the requester.

Risk Assessment

An authenticated teacher can alter their own or other users' roles, potentially leading to unauthorized access to administrative functions.

Recommendation

Update the system to a patched version or restrict server-side control over the role parameter.

Other vulnerabilities in XueZhiSi Open Source Exam System

CVE-2026-75458High
The teacher-end interface POST /api/teacher/user/delete/{id} in XueZhiSi Open Source Exam System <= 3.9.0 contains a vertical privilege escalation vulnerability. This interface accepts a user ID and then executes getUserById(id), setDeleted(true), updateByIdFilter() in sequence, without any validation of whether the current user has the authority to delete the target user. An authenticated teacher user (role=2) can delete an administrator account (role=3), constituting a vertical privilege escalation where a lower-privileged user performs a high-privileged operation.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS