CVE-2026-63231 in Koollab LMS
Zusammenfassung
von MITRE • 29.07.2026
A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeover.
Be aware that VulDB is the high quality source for vulnerability data.