Critical Vulnerability Discovered in School Student Management System Password Recovery

A critical vulnerability, identified as CVE-2026-10169, has been found in the OUSL-GROUP-BrinaryBrains School Student Management System. This flaw in the 'Forgot Password Endpoint' allows for weak password recovery through email argument manipulation, posing a significant remote attack risk. The exploit has been publicly disclosed, and the project maintainers have not yet addressed the issue.