← Database

CVE-2026-25811

CRITICAL CVSS: 9.1 Published: 2026-02-09 Modified: 2026-06-17

Description

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the application derives the tenant identifier directly from the email domain provided by the user, without validating domain ownership or registration. This allows cross-tenant data access.

Affected Platforms

Prasklatechnology Placipy

Weakness Type

CWE-863

References