CVE-2026-63237 in Koollab LMSinfo

Zusammenfassung

von MITRE • 29.07.2026

A TOTP two-factor authentication bypass vulnerability in Koollab LMS allowed an attacker to supply a client-controlled seed to generate a matching one-time password and bypass the second authentication factor, potentially enabling unauthorised access to administrator accounts.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Zuständig

CSA

Reservieren

16.07.2026

Veröffentlichung

29.07.2026

Moderieren

akzeptiert

Eintrag

VDB-384073

CPE

bereit

EPSS

0.00000

KEV

nein

Aktivitäten

low

Quellen

Are you interested in using VulDB?

Download the whitepaper to learn more about our service!