CVE-2026-25753 – PlaciPy has a Hard-Coded Default Password for All Student Accounts (Account Takeover)

CVE ID : CVE-2026-25753

Published : Feb. 6, 2026, 6:57 p.m. | 21 minutes ago

Description : PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application uses a hard-coded, static default password for all newly created student accounts. This results in mass account takeover, allowing any attacker to log in as any student once the password is known.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…