PT-2026-65699 · Three Learning · Koollab Lms

CVE-2026-63228 · Publicado 2026-07-29 · Atualizado 2026-07-29

Mitre

CVSS v3.1

2.6

Baixa

Vetor base

AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server.

Correção

Identificadores relacionados

CVE-2026-63228

Produtos afetados

Koollab Lms

Referências · 2

• https://csa.gov.sg/alerts-and-advisories/alerts/al-2026-094 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2026-63228 · Nota de Segurança