Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2026-63238

Authentication bypass vulnerability

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CSA

Description

An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated attacker to take over any account, including administrator accounts, by supplying a valid user UUID without providing primary credentials via the 2FA validation endpoint.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Three Learning Koollab LMS

Default version status: unaffected

  • 5.3.2affected

References