CVE-2026-63238 in Koollab
要約
〜によって MITRE • 2026年07月29日
An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated attacker to take over any account, including administrator accounts, by supplying a valid user UUID without providing primary credentials via the 2FA validation endpoint.
Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.