VulnSocial

CVE-2026-19784Disclosure

LOWCVSS 2.1 · LOW

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Discipline/Referrals.php. This manipulation causes authorization bypass. The attack may be initiated remotely. The exploit has been published and may be used. Upgrading to version 12.9 is able to mitigate this issue. Patch name: 04dd1a368ddf80ad7082baefa3c656e4e1825c76. It is suggested to upgrade the affected component.

Back to dashboard
0.0/ 10 priority

Sources & remediation

Other references
Weakness type (CWE)
CWE-285CWE-639

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-08-14: 2Technical Details · 2026-08-14: 208-14
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
By indicator
Full discourse2 posts
  • Infoflowcloud@infoflowcloud
    Disclosure

    🚨*CVE* CVE-2026-19784 A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Discipline/Referrals.php. This manipulation causes auth… https://www.cve.org/CVERecord?id=CVE-2026-19784 ----- Traducción: Se ha encontrado u… https://infoflow.cloud`

    Post summary

    CVE‑2026‑19784 is reported as a flaw in RosarioSIS up to 12.8, affecting the DBUpdate function in Discipline/Referrals.php and potentially compromising authentication. No PoC, exploit, patch, or active usage details are provided.

    0000025
    98 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-19784 A flaw has been found in francoisjacquet RosarioSIS up to 12.8. This affects the function DBUpdate of the file Discipline/Referrals.php. This manipulation causes auth… https://www.cve.org/CVERecord?id=CVE-2026-19784

    Post summary

    A flaw was identified in RosarioSIS up to version 12.8 affecting the DBUpdate function in Discipline/Referrals.php, likely leading to authorization problems. No exploitation details, PoC, or patch information are provided.

    00000698
    57.9K followersView on X

Explore more

Back to dashboard