Beveiligingsadvies

CVE-2026-63238

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-29 06:27:03
Laatst bijgewerkt 2026-07-29 14:28:37
Toegewezen door CSA
CVSS-score 6.5
Status PUBLISHED

Beschrijving

An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated attacker to take over any account, including administrator accounts, by supplying a valid user UUID without providing primary credentials via the 2FA validation endpoint.