What is CVE-2026-63235?

CVE-2026-63235 is a low-severity vulnerability in Three Learning Koollab Lms, classified under Improper Access Control. CVSS score: 3.7/10. Published 2026-07-29.

How severe is CVE-2026-63235?

Low severity. CVSS v3 base score is 3.7 out of 10.

Vulnerability in Three Learning Koollab Lms

CVE-2026-63235

An improper access control vulnerability in Koollab LMS allowed an unauthenticated attacker to forcibly terminate the session of any user given their email address via the login kickout endpoint, resulting in a denial of service.

CVSS v3 metric

CVSS v3 base score 3.7 (Low). Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L.

Affected products

Three Learning Koollab Lms — versions 5.3.2

Weakness classification (CWE)

CWE-284 — Improper Access Control

References

5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

Frequently asked questions

What is CVE-2026-63235?: CVE-2026-63235 is a low-severity vulnerability in Three Learning Koollab Lms, classified under Improper Access Control. CVSS score: 3.7/10. Published 2026-07-29.
How severe is CVE-2026-63235?: Low severity. CVSS v3 base score is 3.7 out of 10.