CVE-2026-63237 in Koollab LMSinformación

Resumen

por MITRE • 2026-07-29

A TOTP two-factor authentication bypass vulnerability in Koollab LMS allowed an attacker to supply a client-controlled seed to generate a matching one-time password and bypass the second authentication factor, potentially enabling unauthorised access to administrator accounts.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsable

CSA

Reservar

2026-07-16

Divulgación

2026-07-29

Moderación

aceptado

Artículo

VDB-384073

CPE

listo

EPSS

0.00182

KEV

no

Actividades

bajo

Fuentes

Do you know our Splunk app?

Download it now for free!