CVE-2026-63240

—

CVSS 3.1

4.3 medium

EPSS

<1%p7

Published

Jul 29, 2026 (Jul 29, 2026)

Modified

Jul 30, 2026

Description

An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz answers from the course status endpoint without completing the assessment legitimately, compromising the integrity of assessments.

Weakness: CWE-200
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.2%)

In the news0 stories

No ingested article mentions this CVE yet.