{"items":[{"id":"CVE-2026-63242","published":"2026-07-29T06:32:03.383Z","updated":"2026-07-29T14:38:01.902Z","title":"Business logic vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Three Learning","product":"Koollab LMS","kev":false,"epss":0.00254,"kevAdded":null},{"id":"CVE-2026-63241","published":"2026-07-29T06:30:57.071Z","updated":"2026-07-29T14:21:35.225Z","title":"Insecure direct object reference vulnerability","severity":"LOW","score":3.1,"vendor":"Three Learning","product":"Koollab LMS","kev":false,"epss":0.00221,"kevAdded":null},{"id":"CVE-2026-63240","published":"2026-07-29T06:29:53.671Z","updated":"2026-07-29T14:22:33.939Z","title":"Information disclosure vulnerability","severity":"MEDIUM","score":4.3,"vendor":"Three Learning","product":"Koollab LMS","kev":false,"epss":0.00295,"kevAdded":null},{"id":"CVE-2026-63239","published":"2026-07-29T06:28:44.920Z","updated":"2026-07-29T14:24:06.894Z","title":"Hard-coded AWS IAM credentials vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Three Learning","product":"Koollab LMS","kev":false,"epss":0.00207,"kevAdded":null},{"id":"CVE-2026-63238","published":"2026-07-29T06:27:03.705Z","updated":"2026-07-29T14:28:37.043Z","title":"Authentication bypass vulnerability","severity":"MEDIUM","score":6.5,"vendor":"Three Learning","product":"Koollab LMS","kev":false,"epss":0.00341,"kevAdded":null},{"id":"CVE-2026-63237","published":"2026-07-29T06:25:52.341Z","updated":"2026-07-29T14:29:57.945Z","title":"TOTP two-factor authentication bypass vulnerability","severity":"MEDIUM","score":4.8,"vendor":"Three Learning","product":"Koollab LMS","kev":false,"epss":0.00176,"kevAdded":null},{"id":"CVE-2026-63236","published":"2026-07-29T06:24:45.818Z","updated":"2026-07-29T14:30:56.238Z","title":"Improper access control vulnerability","severity":"LOW","score":3.7,"vendor":"Three Learning","product":"Koollab LMS","kev":false,"epss":0.00262,"kevAdded":null},{"id":"CVE-2026-63235","published":"2026-07-29T06:23:33.494Z","updated":"2026-07-29T14:32:09.066Z","title":"Improper access control vulnerability","severity":"LOW","score":3.7,"vendor":"Three Learning","product":"Koollab LMS","kev":false,"epss":0.00312,"kevAdded":null},{"id":"CVE-2026-63234","published":"2026-07-29T06:22:01.996Z","updated":"2026-07-29T15:22:51.961Z","title":"SQL injection and unsafe deserialisation vulnerability","severity":"CRITICAL","score":9.9,"vendor":"Three Learning","product":"Koollab LMS","kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2026-63233","published":"2026-07-29T06:19:14.193Z","updated":"2026-07-29T15:22:58.114Z","title":"SQL injection and unsafe deserialisation vulnerability","severity":"CRITICAL","score":9.9,"vendor":"Three Learning","product":"Koollab LMS","kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2026-63232","published":"2026-07-29T06:16:25.752Z","updated":"2026-07-29T15:23:07.824Z","title":"SQL injection and unsafe deserialisation vulnerability","severity":"CRITICAL","score":9.9,"vendor":"Three Learning","product":"Koollab LMS","kev":false,"epss":0.0053,"kevAdded":null},{"id":"CVE-2026-63231","published":"2026-07-29T06:13:49.303Z","updated":"2026-07-29T15:23:14.267Z","title":"Post-authentication SQL injection vulnerability","severity":"HIGH","score":8.1,"vendor":"Three Learning","product":"Koollab LMS","kev":false,"epss":0.00446,"kevAdded":null},{"id":"CVE-2026-63230","published":"2026-07-29T06:11:58.862Z","updated":"2026-07-29T15:23:22.173Z","title":"Pre-authentication error-based SQL injection vulnerability","severity":"CRITICAL","score":9.1,"vendor":"Three Learning","product":"Koollab LMS","kev":false,"epss":0.00522,"kevAdded":null},{"id":"CVE-2026-63229","published":"2026-07-29T06:09:59.344Z","updated":"2026-07-29T19:25:12.904Z","title":"Pre-authentication blind SQL injection vulnerability","severity":"CRITICAL","score":9.1,"vendor":"Three Learning","product":"Koollab LMS","kev":false,"epss":0.00522,"kevAdded":null},{"id":"CVE-2026-63228","published":"2026-07-29T06:08:36.350Z","updated":"2026-07-29T15:23:31.886Z","title":"Unrestricted image upload vulnerability","severity":"LOW","score":2.6,"vendor":"Three Learning","product":"Koollab LMS","kev":false,"epss":0.00205,"kevAdded":null},{"id":"CVE-2026-3007","published":"2026-04-23T02:54:25.444Z","updated":"2026-05-10T19:57:33.339Z","title":"Stored Cross-Site Scripting (XSS) Vulnerability","severity":"MEDIUM","score":5.4,"vendor":"Three Learning","product":"Koollab Learning Management System","kev":false,"epss":0.00173,"kevAdded":null}]}