Dashboard / CVE-2025-10071

CVE-2025-10071

LOW
INFO Priority: 0.01 BB Relevance: 54/100
Published: 2025-09-07 Modified: 2026-11-07 First seen: 2026-11-07 Status: active

Attack Surface

Network Low Complexity No Interaction

CVSS Vector Breakdown

AV: Network
AC: Low
PR: Low
UI: None
S: X
AT: None
VC: Low
VI: Low
VA: Low

Description

A vulnerability has been found in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /cancelar-enturmacao-em-lote/. Such manipulation leads to improper access controls. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. Upgrading to version 2.12 is able to resolve this issue. The name of the patch is d53365e5656f6499a4deddf89d522814655f769d. The affected component should be upgraded.

Weakness Classification (2)

Affected Software (1)

VendorProductVersion
portabilis i-educar < 2.10.0

References & Advisories (9)

Bug Bounty Relevance

54 / 100
✓ Network accessible
✓ Low complexity
✓ No user interaction

CVSS Score

2.1 / 10.0 v4.0
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

EPSS — Exploitation Probability

0.40%
Raw Score 0.003970
Percentile 34.3%
Date 2026-11-10

EPSS Trend

2026-11-10
0.00397
2026-11-09
0.00397
2026-11-08
0.00397
2026-11-07
0.00397

Intelligence Sources

nvd ref →

External Links