CVE-2025-8789

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

A vulnerability was found in Portabilis i-Educar up to 2.9.0. It has been classified as problematic. This affects an unknown part of the file /module/Api/Diario of the component API Endpoint. The manipulation leads to authorization bypass. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-285 CWE-639

Affected software

Vendor	Product	Versions
Portabilis	i-Educar	2.0; 2.1; 2.2; 2.3; 2.4; 2.5; 2.6; 2.7; 2.8; 2.9.0

References

https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8789.mdExploit, Third Party Advisory
https://vuldb.com/?ctiid.319317Permissions Required, VDB Entry
https://vuldb.com/?id.319317Third Party Advisory, VDB Entry
https://vuldb.com/?submit.625917Third Party Advisory, VDB Entry
https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8789.mdExploit, Third Party Advisory
https://vuldb.com/?submit.625917Third Party Advisory, VDB Entry

Timeline

Published: Aug 10, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-87904.3A vulnerability was found in Portabilis i-Educar up to 2.9.0. It has been declared as critical. This vulnerability affects unknown code of t CVE-2025-87916.3A vulnerability was found in LitmusChaos Litmus up to 3.19.0. It has been rated as critical. This issue affects some unknown processing of t CVE-2025-87924.3A vulnerability classified as problematic has been found in LitmusChaos Litmus up to 3.19.0. Affected is an unknown function. The manipulati CVE-2025-87934.3A vulnerability classified as problematic was found in LitmusChaos Litmus up to 3.19.0. Affected by this vulnerability is an unknown functio CVE-2025-87947.8A vulnerability, which was classified as problematic, has been found in LitmusChaos Litmus up to 3.19.0. Affected by this issue is some unkn CVE-2025-87959.9A vulnerability, which was classified as critical, was found in LitmusChaos Litmus up to 3.19.0. This affects an unknown part of the file /a CVE-2025-87965.4A vulnerability has been found in LitmusChaos Litmus up to 3.19.0 and classified as problematic. This vulnerability affects unknown code of CVE-2025-87978.8A vulnerability was found in LitmusChaos Litmus up to 3.19.0 and classified as critical. This issue affects some unknown processing of the c CVE-2025-87986.1A vulnerability was found in oitcode samarium up to 0.9.6. It has been classified as critical. Affected is an unknown function of the file /CVE-2025-87997.5A vulnerability was identified in Open5GS up to 2.7.5. Affected by this vulnerability is the function amf_npcf_am_policy_control_build_creat CVE-2025-88007.5A vulnerability has been found in Open5GS up to 2.7.5. Affected by this issue is the function esm_handle_pdn_connectivity_request of the fil CVE-2025-88017.5A vulnerability was found in Open5GS up to 2.7.5. This affects the function gmm_state_exception of the file src/amf/gmm-sm.c of the componen