CVE-2026-63240 — Information disclosure vulnerability

CVE-2026-63240

Information disclosure vulnerability PUBLISHED

Description (CNA)

An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz answers from the course status endpoint without completing the assessment legitimately, compromising the integrity of assessments.

Affected (CNA)

Vendor / product	Versions
Three Learning / Koollab LMS	affected 5.3.2

CWE

No CWE identifiers supplied.

References

https://www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-094/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.