agentprime: praskla-technology-assessment-placipyEvery new CVE for praskla-technology-assessment-placipy.https://agentprime.io/CVE-2026-25875: PlaciPy Admin Privilege Escalation via Trusted JWT Claimshttps://agentprime.io/advisories/CVE-2026-25875/https://agentprime.io/advisories/CVE-2026-25875/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Feb 2026 21:07:15 GMTCVEcriticalCVE-2026-25814: NoSQL Injection Risk via Unsanitized Query Parametershttps://agentprime.io/advisories/CVE-2026-25814/https://agentprime.io/advisories/CVE-2026-25814/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Feb 2026 21:05:50 GMTCVEcriticalCVE-2026-25813: PlaciPy Exposes Sensitive Data via Application Logshttps://agentprime.io/advisories/CVE-2026-25813/https://agentprime.io/advisories/CVE-2026-25813/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Feb 2026 21:04:46 GMTCVECVE-2026-25812: PlaciPy is Missing CSRF Protection on State-Changing Endpointshttps://agentprime.io/advisories/CVE-2026-25812/https://agentprime.io/advisories/CVE-2026-25812/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Feb 2026 21:03:36 GMTCVEcriticalCVE-2026-25811: PlaciPy Email Domain Trust Enables Cross-Tenant Data Access (Multi-Tenant Isolation Failure)https://agentprime.io/advisories/CVE-2026-25811/https://agentprime.io/advisories/CVE-2026-25811/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Feb 2026 21:00:38 GMTCVECVE-2026-25809: PlaciPy Code Execution Allowed Without Assessment Active State Validationhttps://agentprime.io/advisories/CVE-2026-25809/https://agentprime.io/advisories/CVE-2026-25809/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Feb 2026 20:58:09 GMTCVECVE-2026-25806: PlaciPy has Missing Authorization Checks on Student Management Endpoints (IDOR)https://agentprime.io/advisories/CVE-2026-25806/https://agentprime.io/advisories/CVE-2026-25806/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Feb 2026 20:48:58 GMTCVECVE-2026-25810: PlaciPy is Missing Object-Level Authorization in student.submission.routes.tshttps://agentprime.io/advisories/CVE-2026-25810/https://agentprime.io/advisories/CVE-2026-25810/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Feb 2026 20:48:54 GMTCVECVE-2026-25876: PlaciPy is Missing Authorization on Assessment Results Endpointhttps://agentprime.io/advisories/CVE-2026-25876/https://agentprime.io/advisories/CVE-2026-25876/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 09 Feb 2026 20:48:50 GMTCVECVE-2026-25753: PlaciPy has a Hard-Coded Default Password for All Student Accounts (Account Takeover)https://agentprime.io/advisories/CVE-2026-25753/https://agentprime.io/advisories/CVE-2026-25753/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Feb 2026 18:57:31 GMTCVEcritical