CVE-2026-63228EPSS p9.6%

CVE-2026-63228CVE-2026-63228

Description

An unrestricted image upload vulnerability in Koollab LMS allowed an authenticated attacker to upload malicious content disguised as an image file via the feedback mail registration endpoint, potentially enabling further attacks on the server.

Scoring

CVSS 2.6 ()
VectorCVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N
EPSS0.21% probability of exploitation · percentile 9.6% · 2026-10-06T12:00:23Z
Last modified2026-07-30
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.