Three Learning
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| Koollab LMS | 15 | – | Jul 29, 2026 |
| Koollab Learning Management System | 1 | – | Apr 23, 2026 |
Exploited and recent CVEs
- CVE-2026-63242 Business logic vulnerability 0.3%
- CVE-2026-63241 Insecure direct object reference vulnerability 0.2%
- CVE-2026-63240 Information disclosure vulnerability 0.3%
- CVE-2026-63239 Hard-coded AWS IAM credentials vulnerability 0.2%
- CVE-2026-63238 Authentication bypass vulnerability 0.3%
- CVE-2026-63237 TOTP two-factor authentication bypass vulnerability 0.2%
- CVE-2026-63236 Improper access control vulnerability 0.3%
- CVE-2026-63235 Improper access control vulnerability 0.3%
- CVE-2026-63234 SQL injection and unsafe deserialisation vulnerability 0.5%
- CVE-2026-63233 SQL injection and unsafe deserialisation vulnerability 0.5%
- CVE-2026-63232 SQL injection and unsafe deserialisation vulnerability 0.5%
- CVE-2026-63231 Post-authentication SQL injection vulnerability 0.4%
- CVE-2026-63230 Pre-authentication error-based SQL injection vulnerability 0.5%
- CVE-2026-63229 Pre-authentication blind SQL injection vulnerability 0.5%
- CVE-2026-63228 Unrestricted image upload vulnerability 0.2%
- CVE-2026-3007 Stored Cross-Site Scripting (XSS) Vulnerability 0.2%