CVE-2026-63236 — Improper access control vulnerability
An improper access control vulnerability in Koollab LMS allowed an unauthenticated attacker to read another user's name, internal identifier, scores, lesson status, lesson posit…
Published: 2026-07-29 · CVSS: 3.7 · CVSS 3.1
An improper access control vulnerability in Koollab LMS allowed an unauthenticated attacker to read another user's name, internal identifier, scores, lesson status, lesson position, and cached lesson state via the SCORM API endpoint.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7