PT-2026-7726 · Frappe · Frappe Learning Management System

Filime · Publicado 2026-02-11 · Atualizado 2026-02-12 · CVE-2026-26031

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Frappe Learning Management System versions prior to 2.44.0

Description A security issue was identified in Frappe Learning Management System where unauthorized users could access the full list of enrolled students, including their email addresses, in batches.

Recommendations Update to version 2.44.0 or later.

Exploit

Correção

Incorrect Authorization

Enumeração de Fraquezas

CWE-863

Identificadores relacionados

CVE-2026-26031

GHSA-3GW9-GWJM-VCQ5

Produtos afetados

Frappe Learning Management System

Referências · 7

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/26xxx/CVE-2026-26031.json · Exploit
• https://github.com/frappe/lms/security/advisories/GHSA-3gw9-gwjm-vcq5 · Aviso do Fabricante
• https://github.com/frappe/lms/releases/tag/v2.44.0 · Nota
• https://osv.dev/vulnerability/CVE-2026-26031 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2021714589919085049 · Publicação no Twitter
• https://t.me/cveNotify/151854 · Publicação no Telegram
• https://nvd.nist.gov/vuln/detail/CVE-2026-26031 · Nota de Segurança