CVE-2023-26584

9.1 criticalEPSS 0.7%

Critical (9.1) in idattend idweb. EPSS 0.7% chance of exploitation in the next 30 days.

Unauthenticated SQL injection in the GetStudentInconsistencies method in IDAttend’s IDWeb application 3.1.052 and earlier allows extraction or modification of all data by unauthenticated attackers.

Severity

CVSS 3.1

9.1 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 51% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2023-10-25
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

idattend:idweb

References

https://www.themissinglink.com.au/security-advisories/cve-2023-26584
https://www.themissinglink.com.au/security-advisories/cve-2023-26584

Check your stack JSON