CVE-2026-63228
LOW2.6CVSS v3
—CVSS v2
0.13%
EPSS (exploit probability)
CWE-434CWE
Description
An unrestricted image upload vulnerability in
Koollab LMS allowed
an authenticated attacker to upload malicious content disguised as an image
file via the feedback mail registration endpoint, potentially enabling further
attacks on the server.
CVSS v3 vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
Affected routers (0)
No routers currently mapped to this CVE in our database.