CVE-2026-63236

LowCVSS 3.7/10Last modified Oct 23, 2026

Description

An improper access control vulnerability in Koollab LMS allowed an unauthenticated attacker to read another user's name, internal identifier, scores, lesson status, lesson position, and cached lesson state via the SCORM API endpoint.

Metrics

CVSS 3.1 3.7/10CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-284

Affected software

No affected versions have been published.

Timeline

Published: Jul 29, 2026
Last modified: Oct 23, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-632374.8A TOTP two-factor authentication bypass vulnerability in Koollab LMS allowed an attacker to supply a client-controlled seed to generate a ma CVE-2026-632386.5An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated attacker to take over any account, including administrator CVE-2026-632395.4A hard-coded AWS IAM credentials vulnerability in Koollab LMS allowed an attacker to access shared multi-tenant S3 buckets and SQS queues, e CVE-2026-63244.8A flaw was found in libsoup. A remote attacker could exploit an unsigned to signed conversion error in the `soup_body_input_stream_read_chun CVE-2026-632404.3An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz answers from the course statu CVE-2026-632413.1An insecure direct object reference vulnerability in Koollab LMS allowed an authenticated user to query the course completion progress of an CVE-2026-632424.3A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SC CVE-2026-632434.3An authentication vulnerability in the Bluetooth Low Energy (BLE) implementation of Creative Sound Blaster Katana could allow an attacker wi CVE-2026-632449.8An authentication bypass vulnerability in WizLearn Technologies' Learning Management System (LMS) could allow an unauthenticated remote atta CVE-2026-632486.5In Eclipse Milo versions 0.6.0 through 1.1.4, OPC UA server diagnostics nodes do not enforce access authorization. An anonymous client can e CVE-2026-63257.5Out-of-bounds write in SetSuitesHashSigAlgo when processing an oversized signature algorithms list, allowing a write past the bounds of the CVE-2026-632527.5In Eclipse Milo versions 0.6.0 through 1.1.4, UASC server transport handlers fail to release retained partial message chunks when a channel