CRITICAL 9.9 NVD
CVE-2026-63227
An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a
An unrestricted SCORM file upload vulnerability
in Koollab LMS allowed
an authenticated module designer to upload a SCORM package containing a PHP
webshell to a publicly accessible directory and execute arbitrary code on the
server.
References
This critical severity vulnerability with a CVSS score of 9.9 was published on 2026-07-29 via NVD.
Risk Timeline
CVE Disclosed2026-07-29 · 5 days ago
Remediation Resources
Official Advisory
www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-094/
vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.