These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.
A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SCORM commit endpoint without viewing the lesson material, compromising training and completion records. This issue affects LMS environments where learners can manipulate SCORM endpoints, potentially leading to inaccurate training records. Verify learner authentication [truncated]
CVE-2026-63241 is an insecure direct object reference vulnerability in Koollab LMS that allows an authenticated user to query the course completion progress of any other user without authorization, disclosing private learning progress information. This vulnerability affects Koollab LMS deployments, and defenders should assess exposure and potential impact. The CVE record and NVD entry provide limited info [truncated]
CVE-2026-63240 is an information disclosure vulnerability in Koollab LMS that allows authenticated learners to obtain correct quiz answers without completing assessments legitimately. This compromises assessment integrity. The CVE was published on 2026-07-29T07:16:43.460Z and was last modified on 2026-10-23T23:10:00.157Z. The NVD entry is currently Deferred.
CVE-2026-63239 debrief based on the supplied source corpus. The vulnerability is a hard-coded AWS IAM credentials issue in Koollab LMS, allowing attackers to access shared multi-tenant S3 buckets and SQS queues. This exposure could lead to sensitive data access and malicious content injection. Defenders and administrators of Koollab LMS deployments should assess exposure and verify remediation to prevent [truncated]
An authentication bypass vulnerability in Koollab LMS allowed an unauthenticated attacker to take over any account, including administrator accounts, by supplying a valid user UUID without providing primary credentials via the 2FA validation endpoint. This vulnerability enables attackers to gain unauthorized access to sensitive information and system controls. Defenders should assess exposure and implemen [truncated]
CVE-2026-63237 is a TOTP two-factor authentication bypass vulnerability in Koollab LMS. An attacker can supply a client-controlled seed to generate a matching one-time password, potentially enabling unauthorized access to administrator accounts. This vulnerability allows an attacker to bypass the second authentication factor, which could lead to unauthorized access to sensitive areas of the system. Defend [truncated]
CVE-2026-63236 is an improper access control vulnerability in Koollab LMS that allows unauthenticated attackers to read user data, including name, internal identifier, scores, lesson status, lesson position, and cached lesson state, via the SCORM API endpoint. This vulnerability has a low severity and defenders should assess exposure and verify user access controls for Koollab LMS SCORM API endpoints. The [truncated]
CVE-2026-63235 is an improper access control vulnerability in Koollab LMS that allows an unauthenticated attacker to forcibly terminate the session of any user given their email address via the login kickout endpoint, resulting in a denial of service. This vulnerability has a CVSS score of 3.7 and a low severity. Defenders responsible for Koollab LMS deployments should assess exposure and potential impact [truncated]
A critical vulnerability in Koollab LMS allows authenticated attackers to inject SQL and execute arbitrary code via the manual mark assessment endpoint. This vulnerability has significant implications for LMS administrators and security teams, who must assess exposure and apply patches or mitigations to prevent exploitation. The vulnerability's high CVSS score of 9.9 indicates its critical severity, empha [truncated]
A critical vulnerability in Koollab LMS allows authenticated attackers to inject malicious SQL and execute arbitrary code on the server through the assessment overall answer endpoint. Defenders should assess exposure, prioritize remediation, and verify inventory for potential compromise, focusing on the assessment overall answer endpoint and verifying inventory for potential compromise with extra scrutiny [truncated]
A critical vulnerability in Koollab LMS allows authenticated attackers to inject SQL and execute arbitrary code via the assessment reinforcement endpoint. This vulnerability has significant implications for system administrators and security teams, who must review and patch their systems to prevent exploitation. The vulnerability is caused by a combination of SQL injection and unsafe deserialization, whic [truncated]
A post-authentication SQL injection vulnerability in Koollab LMS allowed an authenticated attacker to use an error-based SQL oracle via the face-to-face runs update endpoint to read the entire application database and obtain valid JWT tokens for account takeover. This vulnerability has significant implications for defenders, who must assess exposure and potential impact on database confidentiality and int [truncated]
A critical pre-authentication SQL injection vulnerability in Koollab LMS allows unauthenticated attackers to read sensitive database contents. Defenders should assess exposure, prioritize remediation, and verify inventory for potential compromise. The vulnerability's impact on sensitive data and potential for account takeover necessitate swift action. Affected systems require immediate review, and defende [truncated]
CVE-2026-63228 is an unrestricted image upload vulnerability in Koollab LMS. An authenticated attacker can upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server. This vulnerability has a low CVSS score of 2.6 and is considered low-severity. Defenders should assess exposure and verify the vulnerability's impact on [truncated]
