What’s Vulnerable › Products

Three Learning Koollab LMS vulnerabilities

15 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 15 published in the last 12 months.

Check whether your Three Learning Koollab LMS version is affected

Latest Three Learning Koollab LMS vulnerabilities

• CVE-2026-63242 — Business logic vulnerability (CVSS 4.3)
• CVE-2026-63241 — Insecure direct object reference vulnerability (CVSS 3.1)
• CVE-2026-63240 — Information disclosure vulnerability (CVSS 4.3)
• CVE-2026-63239 — Hard-coded AWS IAM credentials vulnerability (CVSS 5.4)
• CVE-2026-63238 — Authentication bypass vulnerability (CVSS 6.5)
• CVE-2026-63237 — TOTP two-factor authentication bypass vulnerability (CVSS 4.8)
• CVE-2026-63236 — Improper access control vulnerability (CVSS 3.7)
• CVE-2026-63235 — Improper access control vulnerability (CVSS 3.7)
• CVE-2026-63234 — SQL injection and unsafe deserialisation vulnerability (CVSS 9.9)
• CVE-2026-63233 — SQL injection and unsafe deserialisation vulnerability (CVSS 9.9)
• CVE-2026-63232 — SQL injection and unsafe deserialisation vulnerability (CVSS 9.9)
• CVE-2026-63231 — Post-authentication SQL injection vulnerability (CVSS 8.1)
• CVE-2026-63230 — Pre-authentication error-based SQL injection vulnerability (CVSS 9.1)
• CVE-2026-63229 — Pre-authentication blind SQL injection vulnerability (CVSS 9.1)
• CVE-2026-63228 — Unrestricted image upload vulnerability (CVSS 2.6)