Portabilis has 35 CVEs on record between 2023 and 2026. The median CVSS is 6.3 (medium). None have a confirmed exploitation report. The dominant weakness classes are CWE-79 (16) and CWE-94 (15). Most affected products: i-educar (29), i-diario (6).
CVEs per month
Last 12 months, by publish date
- Exploited share
- 0% vs 1% corpus
- Median CVSS
- 6.3
- Publish → KEV
- —
- Last 90 days
- 0 prev 0
Weakness classes
Products
- i-educar 29
- i-diario 6
Worst active — by depth score
CVE-2026-2015Medium· 6.3A weakness has been identified in Portabilis i-Educar up to 2.1047CVE-2025-11554Medium· 6.3A security vulnerability has been detected in Portabilis i-Educar up to 2.9.1047CVE-2025-10072Medium· 6.3A vulnerability was found in Portabilis i-Educar up to 2.1047CVE-2025-10071Medium· 6.3Portabilis i-Educar cancelar-enturmacao-em-lote access control47CVE-2025-10070Medium· 6.3Portabilis i-Educar enturmacao-em-lote access control47
Portabilis vulnerabilities
CVEs affecting Portabilis, newest first. Open any entry for full detail, references, and exploit status.
35 CVEsRSS
CVE-2025-8511Low· 3.5PoCA vulnerability was found in Portabilis i-Diario 1.5.0
A vulnerability was found in Portabilis i-Diario 1.5.0. Impacted is an unknown function of the file /diario-de-observacoes/ of the component Observações. Performing a manipulation of the argument Descrição results in cross site scripting…
CVE-2025-7872Low· 3.5PoCA weakness has been identified in Portabilis i-Diario 1.5.0
A weakness has been identified in Portabilis i-Diario 1.5.0. This affects an unknown function of the file /justificativas-de-falta. Executing a manipulation of the argument Justificativa can lead to cross site scripting. The attack may b…
CVE-2025-7871Low· 3.5PoCA security flaw has been discovered in Portabilis i-Diario 1.5.0
A security flaw has been discovered in Portabilis i-Diario 1.5.0. The impacted element is an unknown function of the file /conteudos. Performing a manipulation of the argument filter[by_description] results in cross site scripting. The a…
CVE-2025-7870Low· 3.5PoCA vulnerability was identified in Portabilis i-Diario 1.5.0
A vulnerability was identified in Portabilis i-Diario 1.5.0. The affected element is an unknown function of the file app/uploaders/doc_uploader.rb of the component justificativas-de-falta Endpoint. Such manipulation of the argument Anexo…
CVE-2023-5578Low· 3.5A vulnerability was detected in Portábilis i-Educar up to 2.7.5
A vulnerability was detected in Portábilis i-Educar up to 2.7.5. Affected is an unknown function of the file \intranet\agenda_imprimir.php of the component HTTP GET Request Handler. The manipulation of the argument cod_agenda with the in…