GibbonEdu Gibbon

• CVE-2026-97864 Medium 5.3 GibbonEdu Gibbon Unit Planner units_add_blockAjax.php makeBlock missing authentication 0.6%
• CVE-2026-8209 Medium 6.9 Gibbon versions before v30.0.01 are affected by a path traversal vulnerability resulting in DOS by attempting extraction of web application PHP files, failed .zip extraction results in deletion of the 0.3%
• CVE-2026-8208 High 8.9 Gibbon versions before v30.0.01 are affected by a local file inclusion vulnerability resulting in RCE by changing the report archive directory and forcing interpretation of a user provided .zip as PHP 0.3%
• CVE-2026-8207 High 7.0 Gibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/graphing https://github.com/GibbonEdu/core/blob/c431e25fdc874adece5d2dc7e408e9aa2d 0.2%
• CVE-2025-26211 Low 3.7 Gibbon before 29.0.00 allows CSRF. 0.2%