CVE-2025-10071

Name of the Vulnerable Software and Affected Versions Portabilis i-Educar versions up to 2.10

Description A vulnerability exists in Portabilis i-Educar that allows for improper access controls. This issue affects unknown code within the /cancelar-enturmacao-em-lote/ API endpoint and can be exploited remotely. The exploit for this issue has been publicly disclosed.

Recommendations Versions prior to 2.10 should be updated. As a temporary workaround, restrict access to the /cancelar-enturmacao-em-lote/ API endpoint to minimize the risk of exploitation.