PT-2026-57819 · Skillable · Skillable

Published 2026-07-13 · Updated 2026-07-13 · CVE-2026-56877

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions Skillable (affected versions not specified)

Description A flaw in the lab platform allows for the forgery of a client-supplied identifier to bypass per-user lab launch limits. By modifying the userId variable provided by the browser, an attacker can consume lab allocations belonging to other users.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-472

Related Identifiers

CVE-2026-56877

Affected Products

Skillable

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2026-56877 · Security Note
• https://payloadforge.io/beyond-crto-skillable · Reddit Post
• https://skillable.com/security · Note
• https://twitter.com/payloadforge/status/2076622165542404287 · Twitter Post
• http://openwall.com/lists/oss-security/2026/07/12/1 · Note
• https://openwall.com/lists/oss-security/2026/07/12/1 · Note
• http://openwall.com/lists/oss-security/2026/07/12/2 · Note