CVE-2026-7491 — Zyosoft｜School App - Insecure Direct Object Reference
School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify a specific parameter to read and modify …
Published: 2026-05-02 · CVSS: 8.6 · CVSS 4.0
School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify a specific parameter to read and modify other users' data.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7