CVE-2026-63242 in Koollab LMSinfo

Zusammenfassung

von MITRE • 29.07.2026

A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SCORM commit endpoint without viewing the lesson material, compromising training and completion records.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Zuständig

CSA

Reservieren

16.07.2026

Veröffentlichung

29.07.2026

Moderieren

akzeptiert

Eintrag

VDB-384077

CPE

bereit

EPSS

0.00000

KEV

nein

Aktivitäten

low

Quellen

Interested in the pricing of exploits?

See the underground prices here!