CVE-2025-10846

HIGH 8.8CVE-2025-10846 · Published 23/09/2025 · updated 11/10/2026

In short

CVE-2025-10846 is a HIGH (CVSS 8.8) vulnerability affecting i-educar (portabilis).
Chance of exploitation in the next 30 days (EPSS): 0.44%, higher than 38.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
i-educar portabilis	`≤ 2.10.0`	No fix yet

Description

A vulnerability was determined in Portabilis i-Educar up to 2.10. This vulnerability affects unknown code of the file /module/ComponenteCurricular/edit. This manipulation of the argument ID causes sql injection. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized.

References

karinagante.github.io/cve-2025-10846
karinagante.github.io/cve-2025-10846
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory
vuldb.com · Third Party Advisory

More vulnerabilities in i-educar

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

i-educar

portabilis

≤ 2.10.0

No fix yet

Description

More vulnerabilities in i-educar

See all →