CVE-2026-63240

Published: Lug 29, 2026 Last Modified: Lug 29, 2026
ExploitDB:
Other exploit source:
Google Dorks:
MEDIUM 4,3
Source: 5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
Attack Vector: network
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: none
Availability: none

Description

AI Translation Available

An information disclosure vulnerability in Koollab LMS allowed an authenticated learner
to obtain correct quiz answers from the course status endpoint without
completing the assessment legitimately, compromising the integrity of
assessments.

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026…
https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-094/