CRITICAL 9.9 NVD
CVE-2026-63232
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment reinforcement endpoin
A SQL injection and unsafe deserialisation
vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment
reinforcement endpoint, control data passed to unserialize(), write a webshell
to a publicly accessible location, and execute arbitrary code on the server.
References
This critical severity vulnerability with a CVSS score of 9.9 was published on 2026-07-29 via NVD.
Risk Timeline
CVE Disclosed2026-07-29 · 5 days ago
Remediation Resources
Official Advisory
www.csa.gov.sg/alerts-and-advisories/alerts/al-2026-094/
vulnfeed aggregates 9166 vulnerabilities from NVD, CISA KEV,
Ubuntu, Debian, Red Hat, Kubernetes, Exploit-DB, OSS-Security, GitHub and OpenStack — updated every 4 hours.