CVE-2026-63241

—

CVSS 3.1

3.1 low

EPSS

<1%p4

Published

Jul 29, 2026 (Jul 29, 2026)

Modified

Jul 30, 2026

Description

An insecure direct object reference vulnerability in Koollab LMS allowed an authenticated user to query the course completion progress of any other user without authorisation, disclosing private learning progress information.

Weakness: CWE-639
Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N

NVD CVE.org GitHub PoCs EPSS (0.1%)

In the news0 stories

No ingested article mentions this CVE yet.