VulnSocial

CVE-2026-25814Disclosure(prasklatechnology / placipy)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, User-controlled query parameters are passed directly into DynamoDB query/filter construction without validation or sanitization.

prasklatechnology CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories
Weakness type (CWE)
CWE-74

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • placipy

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-02-09); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
prasklatechnology
Products
placipy

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-02-09: 1Mentions · 2026-02-10: 1Technical Details · 2026-02-09: 1Technical Details · 2026-02-10: 102-0902-10
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-25814 PlaciPy is a placement management system designed for educational institutions. In version 1.0.0, User-controlled query parameters are passed directly into DynamoDB q… https://www.cve.org/CVERecord?id=CVE-2026-25814

    Post summary

    The CVE details that PlaciPy’s version 1.0.0 improperly passes user‑controlled query parameters to DynamoDB, indicating a potential injection vulnerability. No PoC, exploit, patch, or active exploitation evidence is provided.

    00020205
    56.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-25814 DynamoDB Injection Vulnerability in PlaciPy Placement Management System 1.0.0 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-25814

    Post summary

    The text announces CVE-2026-25814 as a DynamoDB Injection vulnerability in PlaciPy Placement Management System 1.0.0, without any PoC, exploit, or patch details.

    0000057
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appprasklatechnologyplacipy1.0.0--

Explore more

Back to dashboardprasklatechnology CVEsplacipy vulnerabilities