CVE-2026-97879 zhistaredu CVE debrief

Who should care

Defenders responsible for zhistaredu StarTraining deployments should assess exposure and prioritize verification of affected versions. This includes reviewing authentication mechanisms for the api-docs Endpoint and implementing compensating controls for remote attacks. Security teams and vulnerability management teams should also review the affected scope and severity to ensure proper mitigation and remediation.

Why it matters

Defenders should prioritize verifying the presence of affected versions and assessing exposure of the api-docs Endpoint due to the risk of remote attacks from missing authentication.

• Verify authentication mechanisms for api-docs Endpoint
• Assess exposure of zhistaredu StarTraining deployments
• Implement compensating controls for remote attacks

Technical summary

The vulnerability is located in the SecurityConfig.java file of the api-docs Endpoint in zhistaredu StarTraining up to 3.8.1. An attacker can perform a manipulation to result in missing authentication, allowing for remote attacks. This could lead to unauthorized access or control of affected systems. Defenders should prioritize verifying the presence of affected versions and assessing exposure of the api-docs Endpoint due to the risk of remote attacks from missing authentication. The exploit has been released to the public and may be used for attacks.

Defensive priority

Defenders should prioritize verifying the presence of affected versions and assessing exposure of the api-docs Endpoint.

Recommended defensive actions

• Verify the presence of affected versions of zhistaredu StarTraining
• Assess exposure of the api-docs Endpoint
• Implement authentication mechanisms for the api-docs Endpoint
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, but vendor comments are lacking. The vulnerability is in zhistaredu StarTraining up to 3.8.1, specifically in the SecurityConfig.java file of the api-docs Endpoint. Defenders should verify the presence of affected versions and assess exposure of the api-docs Endpoint. The exploit has been released to the public and may be used for attacks. There is no vendor response to early disclosure.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.