francoisjacquet CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

MEDIUM francoisjacquet CVE published 2026-10-24

CVE-2026-116010

The CVE Program has published a record for a missing authorization vulnerability in RosarioSIS before version 12.9.1. Authenticated teachers can write records for students outside their course period by supplying arbitrary student IDs, allowing modifications to referrals, eligibility codes, attendance, and final grades. This vulnerability has significant implications for educational institutions using Ros [truncated]