Portabilis vulnerabilities

CVEs per yearBy the year they were published

1. 202598
2. 20255
3. 20263

Newest CVEs

• CVE-2026-4355

  Portabilis i-Educar Endpoint educar_servidor_curso_lst.php cross site scripting

  Portabilis · i-Educar

  Medium5.1
• CVE-2026-2064

  Portabilis i-Educar User Data meusdadod.php cross site scripting

  Portabilis · i-Educar

  Medium5.1
• CVE-2026-2015

  Portabilis i-Educar Final Status Import FinalStatusImportService.php improper authorization

  Portabilis · i-Educar

  Medium5.3
• CVE-2025-9638

  i-Educar 2.10.0 - Stored Cross-Site Scripting (XSS) in admin panel

  Portabilis · i-Educar

  Medium4.8
• CVE-2025-65022

  i-Educar Authenticated Time-based SQL Injection in `agenda.php`

  portabilis · i-educar

  High7.2
• CVE-2025-65023

  i-Educar Authenticated Time-based SQL Injection in `funcionario_vinculo_cad.php`

  portabilis · i-educar

  High7.2
• CVE-2025-65024

  i-Educar Authenticated Time-based SQL Injection in `agenda_admin_cad.php`

  portabilis · i-educar

  High7.2
• CVE-2025-11554

  Portabilis i-Educar User Type AccessLevelController.php insecure inherited permissions

  Portabilis · i-Educar

  Medium5.3
• CVE-2025-11050

  Portabilis i-Educar periodo-lancamento improper authorization

  Portabilis · i-Educar

  Medium5.3
• CVE-2025-11049

  Portabilis i-Educar unificacao-aluno improper authorization

  Portabilis · i-Educar

  Medium5.3