Security Advisory

CVE-2026-25753

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-02-06 18:57:31
Last updated 2026-02-09 15:28:38
Assigner GitHub_M
CVSS score 9.3
State PUBLISHED

Description

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application uses a hard-coded, static default password for all newly created student accounts. This results in mass account takeover, allowing any attacker to log in as any student once the password is known.