Is CVE-2026-63227 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-63227?

CVE-2026-63227 has a CVSS v3 severity of CRITICAL (9.9).

Back

CVE-2026-63227

Description

An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server.