PlayEdu

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

PlayEdu records in CISA KEV

No PlayEdu vulnerabilities are listed in CISA KEV.

Records

1 record

TI-2026-75389 CVE-2026-111603 · GHSA-c9xv-j5wf-2g29

Missing authorization in PlayEdu exposes department-restricted courses

MEDIUM 57

PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authenticated students to access department-restricted courses by omitting the department visibility check.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00315 Published 2026-10-16 No fix listed CWE-639

Open these records in search →

Critical	0
High	0
Medium	1
Low	0
No CVSS	0