CVE-2025-8789

2.1 lowEPSS 0.5%

Low (2.1) in portabilis i-educar. EPSS 0.5% chance of exploitation in the next 30 days.

A vulnerability was found in Portabilis i-Educar up to 2.9.0. It has been classified as problematic. This affects an unknown part of the file /module/Api/Diario of the component API Endpoint. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Severity

CVSS 4.0

2.1 low

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:P

CVSS 3.1

4.3 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

EPSS: 0.5% chance of exploitation in the next 30 days; higher than 41% of CVEs (scores of 2026-10-31)
CWEs: CWE-285, CWE-639
Published: 2025-08-10
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

portabilis:i-educar

References

https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8789.md
https://vuldb.com/?ctiid.319317
https://vuldb.com/?id.319317
https://vuldb.com/?submit.625917
https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8789.md

Check your stack JSON