PT-2026-65699 · Three Learning · Koollab Lms

CVE-2026-63228 · Published 2026-07-29 · Updated 2026-07-29

Mitre

CVSS v3.1

2.6

Low

Base vector

AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server.

Fix

Related Identifiers

CVE-2026-63228

Affected Products

Koollab Lms

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-63228 · Security Note
• https://csa.gov.sg/alerts-and-advisories/alerts/al-2026-094 · Note