PT-2026-65711 · Three Learning · Koollab Lms

CVE-2026-63240 · Published 2026-07-29 · Updated 2026-07-29

NVD

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz answers from the course status endpoint without completing the assessment legitimately, compromising the integrity of assessments.

Fix

Related Identifiers

CVE-2026-63240

Affected Products

Koollab Lms

References · 2

• https://nvd.nist.gov/vuln/detail/CVE-2026-63240 · Security Note
• https://csa.gov.sg/alerts-and-advisories/alerts/al-2026-094 · Note