What is CVE-2025-10763?

CVE-2025-10763 is a medium-severity vulnerability in Academico-Sis Academico, classified under Improper Access Control. CVSS score: 6.3/10. Published 2025-09-21.

How severe is CVE-2025-10763?

Medium severity. CVSS v3 base score is 6.3 out of 10.

Is CVE-2025-10763 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Arbitrary file upload in Academico-Sis Academico

CVE-2025-10763

A vulnerability was determined in academico-sis academico up to d9a9e2636fbf7e5845ee086bcb03ca62faceb6ab. Affected by this issue is some unknown functionality of the file /edit-photo of the component Profile Picture Handler. This manipulation causes unrestricted upload. The attack is possible to be carried out remotely. The exploit has been publicly disclosed and may be utilized. This product adopts a rolling release strategy to maintain continuous delivery The vendor was contacted early about this disclosure but did not respond in any way.

EPSS: 0.003 (24.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 6.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L.

Affected products

Academico-sis Academico — versions d9a9e2636fbf7e5845ee086bcb03ca62faceb6ab

Weakness classification (CWE)

Public proof-of-concept exploits

ARPSyndicate/cve-scores

References

cna@vuldb.com (vdb-entry)
cna@vuldb.com (signature, permissions-required)
cna@vuldb.com (third-party-advisory)
cna@vuldb.com (exploit)

Frequently asked questions

What is CVE-2025-10763?: CVE-2025-10763 is a medium-severity vulnerability in Academico-Sis Academico, classified under Improper Access Control. CVSS score: 6.3/10. Published 2025-09-21.
How severe is CVE-2025-10763?: Medium severity. CVSS v3 base score is 6.3 out of 10.
Is CVE-2025-10763 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.