PT-2026-20980 · Frappe · Frappe Learning Management System

Filime · Publicado 2026-02-20 · Atualizado 2026-02-20 · CVE-2026-26977

Positive Technologies (AI Summary)

CVSS v4.0

6.9

Média

Vetor base

AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Frappe Learning Management System versions 2.44.0 and below

Description Frappe Learning Management System (LMS) allows unauthorized users to access details of unpublished courses through API endpoints. The system is designed to help users structure content.

Recommendations Update to version 2.45.0 or later.

Exploit

Correção

Improper Access Control

Missing Authorization

Enumeração de Fraquezas

CWE-284

CWE-862

Identificadores relacionados

CVE-2026-26977

GHSA-26VF-P39Q-FRX3

Produtos afetados

Frappe Learning Management System

Referências · 5

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26977.json · Exploit
• https://github.com/frappe/lms/security/advisories/GHSA-26vf-p39q-frx3 · Aviso do Fabricante
• https://t.me/CVEtracker/45226 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-26977 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-26977 · Aviso do Fabricante