playedu vulnerabilities

Products

• playedu/playedu 1

Latest playedu CVEs

Newest publication first

1. CVE-2026-111603 PlayEdu through 2.3 Missing Authorization via Student CourseController Endpoints

   Published 2026-10-16

   Medium·CVSS 5.3 EPSS 0.32%

   PlayEdu through 2.3 contains a missing authorization vulnerability in the CourseController that allows authenticated students to access department-restricted courses by omitting the department visibility check. Attackers can enumerate sequential course and attachment IDs via the...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.