（CVE-2025-8789）Portabilis i-Educar API Endpoint模块远程授权绕过漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2025-8789
• https://cve.imfht.com/detail/CVE-2025-8789
• https://github.com/advisories/GHSA-8ppg-fwgr-5pwc
• https://vuldb.com/?id.319317
• https://radar.offseq.com/threat/cve-2025-8789-authorization-bypass-in-portabilis-i-f7d1aa84
• https://github.com/CVE-Hunters/CVE/blob/main/i-educar/CVE-2025-8789.md
• https://vulners.com/cve/CVE-2025-8789
• https://app.opencve.io/cve/?page=2&product=i-educar&vendor=portabilis

Related Vulnerabilities

• PoCCVE-2026-4810: Google ADK-Python - Unauthenticated Builder Endpoint
• PoCCVE-2026-30824: Flowise - NVIDIA NIM Endpoints Missing Authentication
• PoCIvanti Endpoint Manager /RemoteControlAuth/api/Auth 权限绕过漏洞（CVE-2026-1603）
• Ivanti Endpoint Manager 权限管理不当漏洞
• PoCCVE-2026-1603: Ivanti Endpoint Manager - Authentication Bypass
• Ivanti Endpoint Manager Mobile /mifs/c/appstore/fob/3/5/sha256 命令执行漏洞（CVE-2026-1281/CVE-2026-1340）
• Ivanti Endpoint Manager Mobile 未授权 代码注入漏洞
• PoCgrafana-metrics-exposure: Grafana Metrics Endpoint - Information Disclosure
• （CVE-2025-8786）Portabilis i-Diario 1.5.0及更早版本跨站脚本（XSS）漏洞
• （CVE-2025-8785）Portabilis i-Educar 2.9及之前版本跨站脚本漏洞
• （CVE-2025-8787）Portabilis i-Diario 活动记录组件跨站脚本漏洞
• （CVE-2025-8788）Portabilis i-Diario 1.5.0及之前版本Informações adicionais组件跨站脚本漏洞