CVE-2026-63230 — Pre-authentication error-based SQL injection vulnerability
A pre-authentication error-based SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to read sensitive database contents, including personally identif…
Published: 2026-07-29 · CVSS: 9.1 · CVSS 3.1
A pre-authentication error-based SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to read sensitive database contents, including personally identifiable information, credentials, and valid JWT tokens that may enable account takeover, via the SCORM report endpoint.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7