CVE-2026-63240 — Information disclosure vulnerability
An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz answers from the course status endpoint without completing the ass…
Published: 2026-07-29 · CVSS: 4.3 · CVSS 3.1
An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz answers from the course status endpoint without completing the assessment legitimately, compromising the integrity of assessments.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7