Three Learning

Products

ProductCVEsExploitedLatest
Koollab LMS15–Jul 29, 2026
Koollab Learning Management System1–Apr 23, 2026

Exploited and recent CVEs

  • CVE-2026-63242 Medium 4.3 Business logic vulnerability 0.3%
  • CVE-2026-63241 Low 3.1 Insecure direct object reference vulnerability 0.2%
  • CVE-2026-63240 Medium 4.3 Information disclosure vulnerability 0.3%
  • CVE-2026-63239 Medium 5.4 Hard-coded AWS IAM credentials vulnerability 0.2%
  • CVE-2026-63238 Medium 6.5 Authentication bypass vulnerability 0.3%
  • CVE-2026-63237 Medium 4.8 TOTP two-factor authentication bypass vulnerability 0.2%
  • CVE-2026-63236 Low 3.7 Improper access control vulnerability 0.3%
  • CVE-2026-63235 Low 3.7 Improper access control vulnerability 0.3%
  • CVE-2026-63234 Critical 9.9 SQL injection and unsafe deserialisation vulnerability 0.5%
  • CVE-2026-63233 Critical 9.9 SQL injection and unsafe deserialisation vulnerability 0.5%
  • CVE-2026-63232 Critical 9.9 SQL injection and unsafe deserialisation vulnerability 0.5%
  • CVE-2026-63231 High 8.1 Post-authentication SQL injection vulnerability 0.4%
  • CVE-2026-63230 Critical 9.1 Pre-authentication error-based SQL injection vulnerability 0.5%
  • CVE-2026-63229 Critical 9.1 Pre-authentication blind SQL injection vulnerability 0.5%
  • CVE-2026-63228 Low 2.6 Unrestricted image upload vulnerability 0.2%
  • CVE-2026-3007 Medium 5.4 Stored Cross-Site Scripting (XSS) Vulnerability 0.2%