CVE-2026-63237 — TOTP two-factor authentication bypass vulnerability
A TOTP two-factor authentication bypass vulnerability in Koollab LMS allowed an attacker to supply a client-controlled seed to generate a matching one-time password and bypass t…
Published: 2026-07-29 · CVSS: 4.8 · CVSS 3.1
A TOTP two-factor authentication bypass vulnerability in Koollab LMS allowed an attacker to supply a client-controlled seed to generate a matching one-time password and bypass the second authentication factor, potentially enabling unauthorised access to administrator accounts.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7