PT-2026-25800 · Chamilo · Chamilo Lms

Popcorn94 · Publicado 2026-03-16 · Atualizado 2026-03-17 · CVE-2026-30876

Positive Technologies (AI Summary)

CVSS v4.0

6.3

Média

Vetor base

AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Chamilo LMS versions prior to 1.11.36

Description Chamilo LMS is a learning management system susceptible to user enumeration through the use of valid or invalid usernames. This allows an attacker to determine valid usernames within the system.

Recommendations Update to version 1.11.36 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-204

Identificadores relacionados

CVE-2026-30876

GHSA-CQR8-VVQP-4MP4

Produtos afetados

Chamilo Lms

Referências · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30876.json · Exploit
• https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-cqr8-vvqp-4mp4 · Aviso do Fabricante
• https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.36 · Nota
• https://twitter.com/VulmonFeeds/status/2033774067019374994 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2026-30876 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-30876 · Nota de Segurança
• https://twitter.com/cyberbivash/status/2033645355988840707 · Publicação no Twitter
• https://twitter.com/CVEnew/status/2033755323576496606 · Publicação no Twitter