CVE-2025-10608HIGH 6.3EPSS p29.4%
CVE-2025-10608CVE-2025-10608
portabilis / i-educar
Description
A vulnerability was detected in Portabilis i-Educar up to 2.10. The affected element is an unknown function of the file /enrollment-history/. Performing manipulation results in improper access controls. The attack is possible to be carried out remotely. The exploit is now public and may be used.
Scoring
| CVSS 3.1 | 6.3 (HIGH) |
| Vector | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L |
| EPSS | 0.38% probability of exploitation · percentile 29.4% · 2026-10-05T12:00:23Z |
| Published | 2025-09-17 |
| Last modified | 2026-09-26 |
Underlying weaknesses· 2
References
- https://github.com/marcelomulder/CVE/blob/main/i-educar/Broken%20Access%20Control%20Vulnerability%20%20in%20%60.enrollment-history.(ID)%60%20Endpoint.md
- https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10608.md
- https://vuldb.com/?ctiid.324628
- https://vuldb.com/?id.324628
- https://vuldb.com/?submit.649876
- https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10608.md
- https://vuldb.com/?submit.649876
2
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Incorrect Privilege Assignmentcwe-266 | 0% | live |
| Weakness | Improper Access Controlcwe-284 | 0% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.