What’s Vulnerable › Products

Academy LMS vulnerabilities

5 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 5 published in the last 12 months.

Check whether your Academy LMS version is affected

Latest Academy LMS vulnerabilities

• CVE-2026-104050 — Academy LMS < 4.0.0 - Subscriber+ Cross-Course Quiz Answer Disclosure via render_quiz_answers (CVSS 4.3)
• CVE-2026-104049 — Academy LMS < 4.0.0 - Subscriber+ Arbitrary Lesson Content Disclosure via Topic REST Endpoint (CVSS 4.3)
• CVE-2026-16563 — Academy LMS < 3.8.3 - Subscriber+ Arbitrary Lesson Content Disclosure via lessons REST Endpoint (CVSS 6.5)
• CVE-2026-12376 — Academy LMS <= 3.8.2 - Subscriber+ Sensitive Information Disclosure via quiz_attempts REST Endpoint (CVSS 4.3)
• CVE-2026-14184 — Academy LMS < 3.8.1 - Subscriber+ Cross-User Lesson Note and Progress Modification via IDOR (CVSS 5.4)