PT-2026-25800 · Chamilo · Chamilo Lms

Popcorn94 · Published 2026-03-16 · Updated 2026-03-17 · CVE-2026-30876

Positive Technologies (AI Summary)

CVSS v4.0

6.3

Medium

Base vector

AV:N/AC:L/AT:P/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions Chamilo LMS versions prior to 1.11.36

Description Chamilo LMS is a learning management system susceptible to user enumeration through the use of valid or invalid usernames. This allows an attacker to determine valid usernames within the system.

Recommendations Update to version 1.11.36 or later.

Exploit

Fix

Weakness Enumeration

CWE-204

Related Identifiers

CVE-2026-30876

GHSA-CQR8-VVQP-4MP4

Affected Products

Chamilo Lms

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30876.json · Exploit
• https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-cqr8-vvqp-4mp4 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2026-30876 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-30876 · Security Note
• https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.36 · Note
• https://twitter.com/VulmonFeeds/status/2033774067019374994 · Twitter Post
• https://twitter.com/cyberbivash/status/2033645355988840707 · Twitter Post
• https://twitter.com/CVEnew/status/2033755323576496606 · Twitter Post