Is CVE-2026-63241 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-63241?

CVE-2026-63241 has a CVSS v3 severity of LOW (3.1).

Back

CVE-2026-63241

Description

An insecure direct object reference vulnerability in Koollab LMS allowed an authenticated user to query the course completion progress of any other user without authorisation, disclosing private learning progress information.