What’s Vulnerable › Vulnerabilities
CVE-2026-85209: IDOR in AVEZ Electronics's LMS
- Severity: medium (CVSS 6.5 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-10-02 · updated 2026-10-02
- Weakness: CWE-862
Description
Missing Authorization vulnerability in AVEZ Electronics Communication Training and Consultancy Trade Inc. Learning Management System (LMS) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Learning Management System (LMS): through 2026-09-18.
Affected products
- AVEZ Electronics Communication Training and Consultancy Trade Inc. Learning Management System (LMS): through 2026-09-18
References
Get alerted when CVE-2026-85209 or the next vulnerability affects your stack