CVE-2026-63228

CVE-2026-63228CVE-2026-63228

Description

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server.

Scoring

CVSS 2.6 ()
VectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
Last modified2026-07-29
Sourced from NVD. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.