[ Vendor · 4 CVEs ]
chamilo
CVEs affecting chamilo published in the last 30 days, plus any chamilo CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114388 | 21 Oct 2026 | CVSS 5.3 | chamilo-lmsChamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before 2.0.0-RC.3 contain a missing access control vulnerability in GradebookController that allows… | |
| CVE-2026-114389 | 21 Oct 2026 | CVSS 4.3 | chamilo-lmsChamilo LMS from 2.0.0-alpha.4 before 2.0.0-RC.3 contains a missing authorization vulnerability in AiController::openAnswerGrade that allows any… | |
| CVE-2026-114390 | 21 Oct 2026 | CVSS 5.3 | chamilo-lmsChamilo LMS from 2.0.0-alpha.1 before 2.0.0-RC.3 contains a missing authorization vulnerability in legacy AJAX handlers under public/main/inc/ajax/… | |
| CVE-2026-112031 | 19 Oct 2026 | CVSS 3.5 | Chamilo LMSA vulnerability was determined in Chamilo LMS up to 1.11.40/2.0.3/3.0.1. This issue affects the function TicketManager::addProject of the file… |