CVEvulnerability

CVE-2026-63228

2.6 LOW Published 2026-07-29 Modified 2026-10-23 Official page ↗
Status
Deferred
Published
2026-07-29
Last modified
2026-10-23
Assigner
5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
CVSS 3.1 (5f57b9bf-260d-4433-bf07-b6a79e9bb7d4)
2.6 LOW — CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
Weaknesses
CWE-434

Description

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server.

Related

Weakness · CWE (1)

  • CWE-434 Unrestricted Upload of File with Dangerous Type weakness

References