CVE-2026-63237 in Koollab LMSinformação

Sumário

de MITRE • 29/07/2026

A TOTP two-factor authentication bypass vulnerability in Koollab LMS allowed an attacker to supply a client-controlled seed to generate a matching one-time password and bypass the second authentication factor, potentially enabling unauthorised access to administrator accounts.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Responsável

CSA

Reservar

16/07/2026

Divulgação

29/07/2026

Moderação

aceite

Entrada

VDB-384073

CPE

pronto

EPSS

0.00000

KEV

não

Atividades

baixo

Fontes

Do you want to use VulDB in your project?

Use the official API to access entries easily!