What is CVE-2026-63240?

CVE-2026-63240 is a medium-severity vulnerability in Three Learning Koollab Lms, classified under Information Disclosure. CVSS score: 4.3/10. Published 2026-07-29.

How severe is CVE-2026-63240?

Medium severity. CVSS v3 base score is 4.3 out of 10.

Information disclosure in Three Learning Koollab Lms

CVE-2026-63240

An information disclosure vulnerability in Koollab LMS allowed an authenticated learner to obtain correct quiz answers from the course status endpoint without completing the assessment legitimately, compromising the integrity of assessment…

Vulnerability class: Information Disclosure

CVSS v3 metric

CVSS v3 base score 4.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N.

Affected products

Three Learning Koollab Lms — versions 5.3.2

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

5f57b9bf-260d-4433-bf07-b6a79e9bb7d4

Frequently asked questions

What is CVE-2026-63240?: CVE-2026-63240 is a medium-severity vulnerability in Three Learning Koollab Lms, classified under Information Disclosure. CVSS score: 4.3/10. Published 2026-07-29.
How severe is CVE-2026-63240?: Medium severity. CVSS v3 base score is 4.3 out of 10.