CVE-2026-63227

Published Jul 29, 2026

Last updated 24 days ago

CVSS critical 9.9
lms

Overview

Description
An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server.
Source
5f57b9bf-260d-4433-bf07-b6a79e9bb7d4
NVD status
Deferred

Risk scores

CVSS 3.1

Type
Secondary
Base score
9.9
Impact score
6
Exploitability score
3.1
Vector string
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Severity
CRITICAL

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0
CWE-434

Social media

Hype score
Not currently trending

  1. ARETIQ Daily Vulnerability Bulletin ā€” July 29, 2026 šŸ”“ CRITICAL: CVE-2026-54735 (prebid/prebid-server) AAS 12.3 šŸ”“ CRITICAL: CVE-2026-58161 (apache_software_foundation/apache_traffic_server) AAS 12.2 ā€” PoC available šŸ”“ CRITICAL: CVE-2026-63227

    @AretiqAI

    29 Jul 2026

    168 Impressions

    0 Retweets

    4 Likes

    0 Bookmarks

    0 Replies

    0 Quotes

Related CVEs

  1. Unauthenticated Arbitrary File Upload in Masteriyo - LMS <= 2.3.2 versions.ā€¢CVE-2026-73996
  2. Chamilo version 1.11.40 and earlier are vulnerable to authenticated remote code execution in the main/inc/ajax/lang.ajax.php path. This endpoint is protected only by `api_protect_course_script(true)`, which means any authenticated user enrolled in a course (student, teacher, DRH) can reach it.ā€¢CVE-2026-34239
  3. Chamilo LMS versions 1.11.38 and earlier contain a stored cross-site scripting vulnerability in the user registration form that allows any unauthenticated attacker to execute arbitrary JavaScript in an administrator's browser session, leading to full platform admin account takeover. This has been patched in 1.11.40.ā€¢CVE-2026-39878
  4. Microsoft SharePoint Server Missing Authentication for Critical Function Vulnerabilityā€¢CVE-2026-56164
  5. Unauthenticated Cross Site Scripting (XSS) in LMS <= 9.7 versions.ā€¢CVE-2026-27404

References

Sources include official advisories and independent security research.