---
id: CVE-2025-10070
title: Portabilis i-Educar enturmacao-em-lote access control
summary: >-
  A flaw has been found in Portabilis i-Educar up to 2.10. This affects an
  unknown part of the file /enturmacao-em-lote/. This manipulation causes
  improper access controls. The attack is possible to be carried out remotely.
  The exploit has…
severity: medium
cvss: 6.3
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:C'
cvssSource: cna
cwe:
  - CWE-284
  - CWE-266
vendor: Portabilis
product: i-Educar
affected:
  - i-Educar 2.0
  - i-Educar 2.1
  - i-Educar 2.2
  - i-Educar 2.3
  - i-Educar 2.4
  - i-Educar 2.5
  - i-Educar 2.6
  - i-Educar 2.7
  - i-Educar 2.8
  - i-Educar 2.9
  - i-Educar 2.10
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: partial
  timestamp: '2025-09-08T18:53:03.293549Z'
exploitAvailable: true
published: '2025-09-07'
updated: '2026-10-20'
sourceUpdated: '2026-10-20T21:31:19.610Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2025-10070'
references:
  - url: 'https://vuldb.com/vuln/323018'
    label: VDB-323018 | Portabilis i-Educar enturmacao-em-lote access control
  - url: 'https://vuldb.com/vuln/323018/cti'
    label: 'VDB-323018 | CTI Indicators (IOB, IOC, TTP, IOA)'
  - url: 'https://vuldb.com/cve/CVE-2025-10070'
    label: CVE-2025-10070 | CVE Analysis and Report
  - url: 'https://vuldb.com/submit/644133'
    label: 'Submit #644133 | Portabilis i-educar 2.10 Broken Access Control'
  - url: 'https://github.com/marcelomulder/CVE/blob/main/i-educar/CVE-2025-10070.md'
  - url: >-
      https://github.com/marcelomulder/CVE/blob/main/i-educar/Broken%20Access%20Control%20Vulnerability%20%20in%20%60.enturmacao-em-lote.(ID)%60%20Endpoint.md
  - url: >-
      https://github.com/portabilis/i-educar/commit/d53365e5656f6499a4deddf89d522814655f769d
  - url: 'https://github.com/portabilis/i-educar/tree/2.12'
  - url: 'https://github.com/portabilis/i-educar/'
tags:
  - cve.org
  - exploit-available
epss: 0.00328
epssPercentile: 0.24512
ingestedAt: '2026-10-20T22:23:33.697Z'
---

## Overview

A flaw has been found in Portabilis i-Educar up to 2.10. This affects an unknown part of the file /enturmacao-em-lote/. This manipulation causes improper access controls. The attack is possible to be carried out remotely. The exploit has been published and may be used. Upgrading to version 2.12 is able to mitigate this issue. Patch name: d53365e5656f6499a4deddf89d522814655f769d. You should upgrade the affected component.

## Affected

- `i-Educar 2.0`
- `i-Educar 2.1`
- `i-Educar 2.2`
- `i-Educar 2.3`
- `i-Educar 2.4`
- `i-Educar 2.5`
- `i-Educar 2.6`
- `i-Educar 2.7`
- `i-Educar 2.8`
- `i-Educar 2.9`
- `i-Educar 2.10`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.