PlayEdu vulnerabilities

CVEs whose affected-version data names the PlayEdu package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-111603Medium· 4.3

yesterday

PlayEdu through 2.3 Missing Authorization via Student CourseController Endpoints

PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authenticated students to access department-restricted courses by omitting the department visibility check. Attackers can enumerate se…

▾ SunlitPlayEdu · PlayEduvia CVEORG