Lucene search
K

6 matches found

RedhatCVE
RedhatCVE
added 2026/02/11 1:33 a.m.4 views

CVE-2026-25809

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the code evaluation endpoint does not validate the assessment lifecycle state before allowing execution. There is no check to ensure that the assessment has started, is not expired, or the submission...

9.8CVSS5.6AI score0.00103EPSS
Exploits0References1
CVE
CVE
added 2026/02/09 8:58 p.m.7 views

CVE-2026-25809

PlaciPy 1.0.0 contains a code evaluation endpoint that allows execution without validating the assessment lifecycle (started, not expired, or submission window open). This exposes low-risk (per CVSS 4.0 metrics) but real impact to integrity with LOW impact and no confidentiality/availability impa...

9.8CVSS5.6AI score0.00103EPSS
Exploits0References1Affected Software1
ATTACKERKB
ATTACKERKB
added 2026/02/09 8:58 p.m.3 views

CVE-2026-25809

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the code evaluation endpoint does not validate the assessment lifecycle state before allowing execution. There is no check to ensure that the assessment has started, is not expired, or the submission...

5.3CVSS5.6AI score0.00103EPSS
Exploits0References2
Cvelist
Cvelist
added 2026/02/09 8:58 p.m.21 views

CVE-2026-25809 PlaciPy Code Execution Allowed Without Assessment Active State Validation

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the code evaluation endpoint does not validate the assessment lifecycle state before allowing execution. There is no check to ensure that the assessment has started, is not expired, or the submission...

5.3CVSS0.00103EPSS
Exploits0References1
OSV
OSV
added 2026/02/09 8:58 p.m.2 views

CVE-2026-25809 PlaciPy Code Execution Allowed Without Assessment Active State Validation

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the code evaluation endpoint does not validate the assessment lifecycle state before allowing execution. There is no check to ensure that the assessment has started, is not expired, or the submission...

5.3CVSS5.7AI score0.00103EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2026/02/09 12:0 a.m.2 views

PT-2026-7155

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the code evaluation endpoint does not validate the assessment lifecycle state before allowing execution. There is no check to ensure that the assessment has started, is not expired, or the submission...

5.3CVSS5.6AI score0.00103EPSS
Exploits0References2
Rows per page
Query Builder