CVE-2026-108921 in Learning-Management-System
Prediction
by VulDB Data Team • 10/11/2026
A vulnerability was detected in <a href="/product/kusalkasilva:learning-management-system">KusalkaSilva Learning-Management-System up to ffeb873f8803f1e9664384ff75000c7da45466d2</a>. This impacts the function <code>mysql_query</code> of the file <em>remove_announcements.php</em> of the component <em>State-Changing Endpoints</em>. Performing a manipulation of the argument <em>ID</em> results in missing authentication. The attack may be initiated remotely. The exploit is now public and may be used. This product uses a rolling release model to deliver continuous updates. As a result, specific version information for affected or updated releases is not available. The project was informed of the problem early through an issue report but has not responded yet.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.