PT-2025-35447

CVE-2025-9760

·

Published

2025-09-01

·

Updated

2025-09-27

Description by

CVSS 3.1
8.8
High
MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Portabilis i-Educar versions up to 2.10
Description A weakness exists in the Matricula API component of Portabilis i-Educar. The issue affects an unknown part of the file /module/Api/aluno. Manipulation of this component can lead to improper authorization. The attack can be launched remotely, and the exploit has been made publicly available.
Recommendations Versions prior to 2.10 should be updated. As a temporary workaround, restrict access to the /module/Api/aluno file to minimize the risk of exploitation.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
Found an issue in the description? Have something to add? Feel free to write us 👾