EUVD-2026-12379

Insecure Direct Object Reference IDOR vulnerability in Campus Educativa specifically at the endpoint '/archivos/usuarios/ID/username/thumbAAxAA.jpg' translated as 80x90 and 40x45. Successful exploitation of this vulnerability could allow an unauthenticated attacker to access the profile photos of...

PT-2026-25668

Name of the Vulnerable Software and Affected Versions Campus Educativa affected versions not specified Description An Insecure Direct Object Reference IDOR issue exists in Campus Educativa. This allows an unauthenticated attacker to access user profile photos via manipulation of the URL at the AP...