https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T17:36:10.725524+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-25809 CVE-2026-25809 — PlaciPy Code Execution Allowed Without Assessment Active State Validation 2026-10-06T17:36:10.745646+00:00

Affected: Praskla-Technology assessment-placipy

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, the code evaluation endpoint does not validate the assessment lifecycle state before allowing execution. There is no check to ensure that the assessment has started, is not expired, or the submission window is currently open.