CVE-2024-47886Disclosure(chamilo / chamilo_lms)

LOWCVSS 7.2 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Chamilo is a learning management system. Chamillo is affected by a post-authentication phar unserialize which leads to a remote code execution (RCE) within versions 1.11.12 to 1.11.26. By abusing multiple supported features from the virtualization plugin vchamilo, the vulnerability allows an administrator to execute arbitrary code on the server. This issue has been patched in version 1.11.26.

chamilo CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-c4fc-vjm9-9mvc

Other references

https://github.com/chamilo/chamilo-lms/releases/tag/v1.11.28

Weakness type (CWE)

CWE-502

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

chamilo_lms

Threat summary

4 mentions across 4 observed days
Momentum state: stable

What's happening

Technical details provided in 4 signals
Disclosure: 4 classified signals
Peaked 3d ago at 1 mentions (2026-03-02); latest day: 1
4 total mentions across 4 days

Affected systems

Vendors

chamilo

Products

chamilo_lms

Deep dive

Activity timeline4 mentions / 4d

Signal classification1 categories

Disclosure

4100.0%

Referenced assets2 URLs

By indicator

Full discourse4 posts

CRAC Learning - Tech@cracbot217d
Disclosure
CVE-2024-47886 (CVSS:8.7, HIGH) is Analyzed. Chamilo is a learning management system. Chamillo is affected by a post-authentication phar unserialize which leads to a..https://nvd.nist.gov/vuln/detail/CVE-2024-47886 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
A post-authentication deserialization vulnerability (CVSS 8.7) in Chamilo (CVE‑2024‑47886) was identified and linked to the NVD, with no PoC, exploit, patch, or active exploitation details provided.
0000051
173 followersView on X
CRAC Learning - Tech@cracbot218d
Disclosure
CVE-2024-47886 (CVSS:8.7, HIGH) is Analyzed. Chamilo is a learning management system. Chamillo is affected by a post-authentication phar unserialize which leads to a..https://nvd.nist.gov/vuln/detail/CVE-2024-47886 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE-2024-47886, detailing its high severity and specifying a post-authentication PHAR unserialize flaw in Chamilo, but offers no proof of concept, exploit code, or patch information.
0000050
173 followersView on X
CRAC Learning - Tech@cracbot219d
Disclosure
CVE-2024-47886 (CVSS:8.7, HIGH) is Analyzed. Chamilo is a learning management system. Chamillo is affected by a post-authentication phar unserialize which leads to a..https://nvd.nist.gov/vuln/detail/CVE-2024-47886 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The post announces CVE‑2024‑47886, a high‑severity vulnerability affecting Chamilo via a post‑authentication phar unserialize, but it does not provide a PoC, exploit code, or evidence of active exploitation.
0000040
173 followersView on X
Vulmon Vulnerability Feed@VulmonFeeds221d
Disclosure
CVE-2024-47886 Remote Code Execution in Chamilo LMS via Phar Unserialize Vulnerability https://vulmon.com/vulnerabilitydetails?qid=CVE-2024-47886
Post summary
The text announces a remote code execution vulnerability in Chamilo LMS involving Phar unserialize, with no PoC, exploit, patch, or active exploitation details provided.
0000079
4.0K followersView on X

CPE platform detail1 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

1 of 1 entries

Part	Vendor	Product	Version	Target SW	Target HW
App	chamilo	chamilo_lms	-	-	-

Explore more

Back to dashboard chamilo CVEs chamilo_lms vulnerabilities

What researchers are saying

CVE-2024-47886

CRAC Learning - Tech@cracbotDisclosure

A post-authentication deserialization vulnerability (CVSS 8.7) in Chamilo (CVE‑2024‑47886) was identified and linked to the NVD, with no PoC, exploit, patch, or active exploitation details provided.

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE-2024-47886, detailing its high severity and specifying a post-authentication PHAR unserialize flaw in Chamilo, but offers no proof of concept, exploit code, or patch information.

CRAC Learning - Tech@cracbotDisclosure

The post announces CVE‑2024‑47886, a high‑severity vulnerability affecting Chamilo via a post‑authentication phar unserialize, but it does not provide a PoC, exploit code, or evidence of active exploitation.

Vulmon Vulnerability Feed@VulmonFeedsDisclosure

The text announces a remote code execution vulnerability in Chamilo LMS involving Phar unserialize, with no PoC, exploit, patch, or active exploitation details provided.