Zyosoft

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Zyosoft records in CISA KEV

No Zyosoft vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-06585 CVE-2026-7491 · GHSA-pjxf-5f7v-2qf7

Zyosoft｜School App - Insecure Direct Object Reference

LOW 39

School App developed by Zyosoft has an Insecure Direct Object Reference vulnerability, allowing authenticated remote attackers to modify a specific parameter to read and modify other users' data.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00259 Published 2026-05-02 Fixed in 1.1.62, 2.7.2 CWE-639

Open these records in search →

Critical	0
High	1
Medium	0
Low	0
No CVSS	0