# cve.now: Portabilis

The newest entries naming Portabilis as an affected vendor (up to 200), of 106 in all, 0 known exploited. Older ones are in the full catalog at https://cve.now/latest.md.

- [CVE-2026-4355](https://cve.now/CVE-2026-4355.md): Portabilis i-Educar Endpoint educar\_servidor\_curso\_lst.php cross site scripting (CVSS 5.1)
- [CVE-2026-2064](https://cve.now/CVE-2026-2064.md): Portabilis i-Educar User Data meusdadod.php cross site scripting (CVSS 5.1)
- [CVE-2026-2015](https://cve.now/CVE-2026-2015.md): Portabilis i-Educar Final Status Import FinalStatusImportService.php improper authorization (CVSS 5.3)
- [CVE-2025-9638](https://cve.now/CVE-2025-9638.md): i-Educar 2.10.0 - Stored Cross-Site Scripting (XSS) in admin panel (CVSS 4.8)
- [CVE-2025-65022](https://cve.now/CVE-2025-65022.md): i-Educar Authenticated Time-based SQL Injection in \`agenda.php\` (CVSS 7.2)
- [CVE-2025-65023](https://cve.now/CVE-2025-65023.md): i-Educar Authenticated Time-based SQL Injection in \`funcionario\_vinculo\_cad.php\` (CVSS 7.2)
- [CVE-2025-65024](https://cve.now/CVE-2025-65024.md): i-Educar Authenticated Time-based SQL Injection in \`agenda\_admin\_cad.php\` (CVSS 7.2)
- [CVE-2025-11554](https://cve.now/CVE-2025-11554.md): Portabilis i-Educar User Type AccessLevelController.php insecure inherited permissions (CVSS 5.3)
- [CVE-2025-11050](https://cve.now/CVE-2025-11050.md): Portabilis i-Educar periodo-lancamento improper authorization (CVSS 5.3)
- [CVE-2025-11049](https://cve.now/CVE-2025-11049.md): Portabilis i-Educar unificacao-aluno improper authorization (CVSS 5.3)
- [CVE-2025-11048](https://cve.now/CVE-2025-11048.md): Portabilis i-Educar consulta-dispensas improper authorization (CVSS 5.3)
- [CVE-2025-11047](https://cve.now/CVE-2025-11047.md): Portabilis i-Educar aluno improper authorization (CVSS 5.3)
- [CVE-2025-10846](https://cve.now/CVE-2025-10846.md): Portabilis i-Educar edit sql injection (CVSS 5.3)
- [CVE-2025-10845](https://cve.now/CVE-2025-10845.md): Portabilis i-Educar view sql injection (CVSS 5.3)
- [CVE-2025-10844](https://cve.now/CVE-2025-10844.md): Portabilis i-Educar aluno sql injection (CVSS 5.3)
- [CVE-2025-10608](https://cve.now/CVE-2025-10608.md): Portabilis i-Educar enrollment-history access control (CVSS 5.3)
- [CVE-2025-10607](https://cve.now/CVE-2025-10607.md): Portabilis i-Educar diarioApi information disclosure (CVSS 5.3)
- [CVE-2025-10606](https://cve.now/CVE-2025-10606.md): Portabilis i-Educar ConfiguracaoMovimentoGeral cross site scripting (CVSS 5.3)
- [CVE-2025-10605](https://cve.now/CVE-2025-10605.md): Portabilis i-Educar agenda\_preferencias.php cross site scripting (CVSS 5.3)
- [CVE-2025-10591](https://cve.now/CVE-2025-10591.md): Portabilis i-Educar Editar Função educar\_funcao\_cad.php cross site scripting (CVSS 5.1)
- [CVE-2025-10590](https://cve.now/CVE-2025-10590.md): Portabilis i-Educar educar\_usuario\_det.php cross site scripting (CVSS 5.3)
- [CVE-2025-10584](https://cve.now/CVE-2025-10584.md): Portabilis i-Educar educar\_calendario\_anotacao\_cad.php cross site scripting (CVSS 5.1)
- [CVE-2025-10373](https://cve.now/CVE-2025-10373.md): Portabilis i-Educar educar\_turma\_tipo\_cad.php cross site scripting (CVSS 5.1)
- [CVE-2025-10372](https://cve.now/CVE-2025-10372.md): Portabilis i-Educar educar\_modulo\_cad.php cross site scripting (CVSS 5.1)
- [CVE-2025-10099](https://cve.now/CVE-2025-10099.md): Portabilis i-Educar Editar usuário educar\_usuario\_cad.php cross site scripting (CVSS 4.8)
- [CVE-2025-10074](https://cve.now/CVE-2025-10074.md): Portabilis i-Educar tipos cross site scripting (CVSS 5.1)
- [CVE-2025-10073](https://cve.now/CVE-2025-10073.md): Portabilis i-Educar turma improper authorization (CVSS 5.3)
- [CVE-2025-10072](https://cve.now/CVE-2025-10072.md): Portabilis i-Educar enturmar access control (CVSS 5.3)
- [CVE-2025-10071](https://cve.now/CVE-2025-10071.md): Portabilis i-Educar cancelar-enturmacao-em-lote access control (CVSS 5.3)
- [CVE-2025-10070](https://cve.now/CVE-2025-10070.md): Portabilis i-Educar enturmacao-em-lote access control (CVSS 5.3)
- [CVE-2025-10013](https://cve.now/CVE-2025-10013.md): Portabilis i-Educar exportacao-para-o-seb access control (CVSS 5.3)
- [CVE-2025-10012](https://cve.now/CVE-2025-10012.md): Portabilis i-Educar educar\_historico\_escolar\_lst.php sql injection (CVSS 5.3)
- [CVE-2025-10011](https://cve.now/CVE-2025-10011.md): Portabilis i-Educar edit sql injection (CVSS 5.3)
- [CVE-2025-9760](https://cve.now/CVE-2025-9760.md): Portabilis i-Educar Matricula API matricula improper authorization (CVSS 5.3)
- [CVE-2025-9738](https://cve.now/CVE-2025-9738.md): Portabilis i-Educar educar\_tipo\_ensino\_cad.php cross site scripting (CVSS 5.1)
- [CVE-2025-9724](https://cve.now/CVE-2025-9724.md): Portabilis i-Educar educar\_nivel\_ensino\_cad.php cross site scripting (CVSS 5.1)
- [CVE-2025-9723](https://cve.now/CVE-2025-9723.md): Portabilis i-Educar educar\_tipo\_regime\_cad.php cross site scripting (CVSS 5.1)
- [CVE-2025-9722](https://cve.now/CVE-2025-9722.md): Portabilis i-Educar educar\_tipo\_ocorrencia\_disciplinar\_cad.php cross site scripting (CVSS 5.1)
- [CVE-2025-9721](https://cve.now/CVE-2025-9721.md): Portabilis i-Educar edit cross site scripting (CVSS 5.1)
- [CVE-2025-9720](https://cve.now/CVE-2025-9720.md): Portabilis i-Educar Cadastrar tabela de arredondamento edit cross site scripting (CVSS 5.1)
- [CVE-2025-9687](https://cve.now/CVE-2025-9687.md): Portabilis i-Educar processamentoApi improper authorization (CVSS 5.3)
- [CVE-2025-9686](https://cve.now/CVE-2025-9686.md): Portabilis i-Educar Listagem de áreas de conhecimento edit sql injection (CVSS 5.3)
- [CVE-2025-9685](https://cve.now/CVE-2025-9685.md): Portabilis i-Educar Listagem de áreas de conhecimento view sql injection (CVSS 5.3)
- [CVE-2025-9684](https://cve.now/CVE-2025-9684.md): Portabilis i-Educar Formula de Cálculo de Média edit sql injection (CVSS 5.3)
- [CVE-2025-9653](https://cve.now/CVE-2025-9653.md): Portabilis i-Educar Cadastrar projeto educar\_projeto\_cad.php cross site scripting (CVSS 5.1)
- [CVE-2025-9652](https://cve.now/CVE-2025-9652.md): Portabilis i-Educar Cadastrar tipo de transferência educar\_transferencia\_tipo\_cad.php cross site scripting (CVSS 5.1)
- [CVE-2025-9609](https://cve.now/CVE-2025-9609.md): Portabilis i-Educar consulta improper authorization (CVSS 5.3)
- [CVE-2025-9608](https://cve.now/CVE-2025-9608.md): Portabilis i-Educar Formula de Cálculo de Média view sql injection (CVSS 5.3)
- [CVE-2025-9607](https://cve.now/CVE-2025-9607.md): Portabilis i-Educar Tabelas de Arredondamento view sql injection (CVSS 5.3)
- [CVE-2025-9606](https://cve.now/CVE-2025-9606.md): Portabilis i-Educar agenda\_preferencias.php sql injection (CVSS 5.3)
- [CVE-2025-9532](https://cve.now/CVE-2025-9532.md): Portabilis i-Educar view sql injection (CVSS 5.3)
- [CVE-2025-9531](https://cve.now/CVE-2025-9531.md): Portabilis i-Educar Agenda agenda.php sql injection (CVSS 5.3)
- [CVE-2025-9236](https://cve.now/CVE-2025-9236.md): Portabilis i-Educar Tipos de usuàrio educar\_tipo\_usuario\_lst.php sql injection (CVSS 5.3)
- [CVE-2025-9109](https://cve.now/CVE-2025-9109.md): Portabilis i-Diario Password Recovery Endpoint email observable response discrepancy (CVSS 6.3)
- [CVE-2025-9108](https://cve.now/CVE-2025-9108.md): Portabilis i-Diario Login Page ui layer (CVSS 5.3)
- [CVE-2025-9107](https://cve.now/CVE-2025-9107.md): Portabilis i-Diario search\_autocomplete cross site scripting (CVSS 5.3)
- [CVE-2025-9106](https://cve.now/CVE-2025-9106.md): Portabilis i-Diario Informações Adicionais /planos-de-ensino-por-disciplina cross site scripting (CVSS 5.1)
- [CVE-2025-9105](https://cve.now/CVE-2025-9105.md): Portabilis i-Diario Informações Adicionais /planos-de-ensino-por-areas-de-conhecimento cross site scripting (CVSS 5.1)
- [CVE-2025-9104](https://cve.now/CVE-2025-9104.md): Portabilis i-Diario Informações Adicionais /planos-de-aulas-por-disciplina cross site scripting (CVSS 5.1)
- [CVE-2025-8920](https://cve.now/CVE-2025-8920.md): Portabilis i-Diario Dicionário de Termos BNCC dicionario-de-termos-bncc cross site scripting (CVSS 4.8)
- [CVE-2025-8919](https://cve.now/CVE-2025-8919.md): Portabilis i-Diario History objetivos-de-aprendizagem-e-habilidades cross site scripting (CVSS 4.8)
- [CVE-2025-8918](https://cve.now/CVE-2025-8918.md): Portabilis i-Educar Editar educar\_instituicao\_cad.php cross site scripting (CVSS 4.8)
- [CVE-2025-8790](https://cve.now/CVE-2025-8790.md): Portabilis i-Educar API Endpoint pessoa improper authorization (CVSS 5.3)
- [CVE-2025-8789](https://cve.now/CVE-2025-8789.md): Portabilis i-Educar API Endpoint Diario authorization (CVSS 5.3)
- [CVE-2025-8788](https://cve.now/CVE-2025-8788.md): Portabilis i-Diario Informações adicionais planos-de-aula-por-areas-de-conhecimento cross site scripting (CVSS 5.1)
- [CVE-2025-8787](https://cve.now/CVE-2025-8787.md): Portabilis i-Diario Registro das atividades registros-de-conteudos-por-disciplina cross site scripting (CVSS 5.1)
- [CVE-2025-8786](https://cve.now/CVE-2025-8786.md): Portabilis i-Diario Registro das atividades registros-de-conteudos-por-areas-de-conhecimento cross site scripting (CVSS 5.1)
- [CVE-2025-8785](https://cve.now/CVE-2025-8785.md): Portabilis i-Educar educar\_usuario\_lst.php cross site scripting (CVSS 5.1)
- [CVE-2025-8784](https://cve.now/CVE-2025-8784.md): Portabilis i-Educar Cadastrar Vínculo funcionario\_vinculo\_cad.php cross site scripting (CVSS 5.1)
- [CVE-2025-8545](https://cve.now/CVE-2025-8545.md): Portabilis i-Educar educar\_motivo\_afastamento\_cad.php cross site scripting (CVSS 4.8)
- [CVE-2025-8544](https://cve.now/CVE-2025-8544.md): Portabilis i-Educar edit cross site scripting (CVSS 4.8)
- [CVE-2025-8543](https://cve.now/CVE-2025-8543.md): Portabilis i-Educar educar\_raca\_cad.php cross site scripting (CVSS 4.8)
- [CVE-2025-8542](https://cve.now/CVE-2025-8542.md): Portabilis i-Educar empresas\_cad.php cross site scripting (CVSS 4.8)
- [CVE-2025-8541](https://cve.now/CVE-2025-8541.md): Portabilis i-Educar public\_uf\_cad.php cross site scripting (CVSS 4.8)
- [CVE-2025-8540](https://cve.now/CVE-2025-8540.md): Portabilis i-Educar public\_municipio\_cad.php cross site scripting (CVSS 4.8)
- [CVE-2025-8539](https://cve.now/CVE-2025-8539.md): Portabilis i-Educar public\_distrito\_cad.php cross site scripting (CVSS 4.8)
- [CVE-2025-8538](https://cve.now/CVE-2025-8538.md): Portabilis i-Educar novo cross site scripting (CVSS 4.8)
- [CVE-2025-8511](https://cve.now/CVE-2025-8511.md): Portabilis i-Diario Observações diario-de-observacoes cross site scripting (CVSS 5.1)
- [CVE-2025-8510](https://cve.now/CVE-2025-8510.md): Portabilis i-Educar educar\_matricula\_lst.php Gerar cross site scripting (CVSS 5.1)
- [CVE-2025-8509](https://cve.now/CVE-2025-8509.md): Portabilis i-Educar educar\_servidor\_cad.php cross site scripting (CVSS 5.1)
- [CVE-2025-8508](https://cve.now/CVE-2025-8508.md): Portabilis i-Educar educar\_avaliacao\_desempenho\_cad.php cross site scripting (CVSS 5.1)
- [CVE-2025-8507](https://cve.now/CVE-2025-8507.md): Portabilis i-Educar educar\_funcao\_lst.php cross site scripting (CVSS 5.1)
- [CVE-2025-8370](https://cve.now/CVE-2025-8370.md): Portabilis i-Educar educar\_escolaridade\_lst.php cross site scripting (CVSS 5.3)
- [CVE-2025-8369](https://cve.now/CVE-2025-8369.md): Portabilis i-Educar educar\_avaliacao\_desempenho\_lst.php cross site scripting (CVSS 5.3)
- [CVE-2025-8368](https://cve.now/CVE-2025-8368.md): Portabilis i-Educar pesquisa\_pessoa\_lst.php cross site scripting (CVSS 5.3)
- [CVE-2025-8367](https://cve.now/CVE-2025-8367.md): Portabilis i-Educar funcionario\_vinculo\_lst.php cross site scripting (CVSS 5.3)
- [CVE-2025-8366](https://cve.now/CVE-2025-8366.md): Portabilis i-Educar educar\_servidor\_lst.php cross site scripting (CVSS 5.3)
- [CVE-2025-8365](https://cve.now/CVE-2025-8365.md): Portabilis i-Educar atendidos\_cad.php cross site scripting (CVSS 5.1)
- [CVE-2025-8346](https://cve.now/CVE-2025-8346.md): Portabilis i-Educar educar\_aluno\_lst.php cross site scripting (CVSS 5.3)
- [CVE-2025-7872](https://cve.now/CVE-2025-7872.md): Portabilis i-Diario justificativas-de-falta cross site scripting (CVSS 5.1)
- [CVE-2025-7871](https://cve.now/CVE-2025-7871.md): Portabilis i-Diario conteudos cross site scripting (CVSS 5.1)
- [CVE-2025-7870](https://cve.now/CVE-2025-7870.md): Portabilis i-Diario justificativas-de-falta Endpoint doc\_uploader.rb cross site scripting (CVSS 5.1)
- [CVE-2025-7869](https://cve.now/CVE-2025-7869.md): Portabilis i-Educar Turma Module educar\_turma\_tipo\_det.php cross site scripting (CVSS 5.1)
- [CVE-2025-7868](https://cve.now/CVE-2025-7868.md): Portabilis i-Educar Calendar educar\_calendario\_dia\_motivo\_cad.php cross site scripting (CVSS 5.1)
- [CVE-2025-7867](https://cve.now/CVE-2025-7867.md): Portabilis i-Educar Agenda agenda.php cross site scripting (CVSS 5.1)
- [CVE-2025-7866](https://cve.now/CVE-2025-7866.md): Portabilis i-Educar Disabilities Module educar\_deficiencia\_lst.php cross site scripting (CVSS 5.1)
- [CVE-2025-7113](https://cve.now/CVE-2025-7113.md): Portabilis i-Educar Curricular Components Module edit cross site scripting (CVSS 5.1)
- [CVE-2025-7112](https://cve.now/CVE-2025-7112.md): Portabilis i-Educar Function Management Module educar\_funcao\_det.php cross site scripting (CVSS 5.1)
- [CVE-2025-7111](https://cve.now/CVE-2025-7111.md): Portabilis i-Educar Course Module educar\_curso\_det.php cross site scripting (CVSS 5.1)
- [CVE-2025-7110](https://cve.now/CVE-2025-7110.md): Portabilis i-Educar School Module educar\_escola\_lst.php cross site scripting (CVSS 5.1)
- [CVE-2025-7109](https://cve.now/CVE-2025-7109.md): Portabilis i-Educar Student Benefits Registration educar\_aluno\_beneficio\_lst.php cross site scripting (CVSS 5.1)
- [CVE-2024-55651](https://cve.now/CVE-2024-55651.md): i-Educar Stored Cross-Site Scripting vulnerability (CVSS 2.0)
- [CVE-2024-12893](https://cve.now/CVE-2024-12893.md): Portabilis i-Educar Tipo de Usuário Page 2 cross site scripting (CVSS 5.1)
- [CVE-2024-45059](https://cve.now/CVE-2024-45059.md): Authenticated SQL Injection in i-Educar (CVSS 8.8)
- [CVE-2024-45058](https://cve.now/CVE-2024-45058.md): Privilege escalation in i-Educar (CVSS 8.1)
- [CVE-2024-45057](https://cve.now/CVE-2024-45057.md): Reflected Cross-Site Scripting in i-Educar (CVSS 6.3)

---

Source: cve.now
Built by [Sazabi](https://www.sazabi.com/?utm_source=cve-now&utm_medium=markdown), AI-native observability and security: automatic issue detection, plain-language log search and live dashboards.
Page: https://cve.now/vendors/portabilis
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.