VulnSocial

CVE-2026-30875Disclosure(chamilo / chamilo_lms)

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Patch chamilo chamilo_lms systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Chamilo LMS is a learning management system. Prior to version 1.11.36, an arbitrary file upload vulnerability in the H5P Import feature allows authenticated users with Teacher role to achieve Remote Code Execution (RCE). The H5P package validation only checks if h5p.json exists but doesn't block .htaccess or PHP files with alternative extensions. An attacker uploads a crafted H5P package containing a webshell and .htaccess that enables PHP execution for .txt files, bypassing security control. This issue has been patched in version 1.11.36.

chamilo CVEsBack to dashboard
0.5/ 10 priority

Sources & remediation

Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-94

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chamilo_lms

Threat summary

  • Patch or workaround signal is available
  • 5 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 2 signals
  • Technical details provided in 5 signals
  • Disclosure: 4 classified signals
  • Peaked 1d ago at 3 mentions (2026-03-16); latest day: 2
  • 5 total mentions across 2 days

Affected systems

Vendors
chamilo
Products
chamilo_lms

Deep dive

Activity timeline5 mentions / 2d
01223Mentions · 2026-03-16: 3Mentions · 2026-03-17: 2Patch / Workaround · 2026-03-16: 1Patch / Workaround · 2026-03-17: 1Technical Details · 2026-03-16: 3Technical Details · 2026-03-17: 203-1603-17
Signal classification2 categories
Disclosure
480.0%
Patch
120.0%
Referenced assets5 URLs
Classification over time
DateTotalLabels
2026-03-163
Disclosure2Patch1
2026-03-172
Disclosure2
Full discourse5 posts
  • The Hacker Wire@TheHackerWire
    Disclosure

    🟠 CVE-2026-30875 - High Chamilo LMS is a learning management system. Prior to version 1.11.36, an arbitrary file upload vulnerability in the H5P Import feature allows authenticated users with Teacher role to achieve... https://www.thehackerwire.com/vulnerability/CVE-2026-30875/ https://t.co/HOZg1aon9U

    Post summary

    Chamilo LMS 1.11.36‑pre versions have a high‑severity arbitrary file upload flaw in the H5P Import feature that permits authenticated Teacher users to deploy potentially malicious files.

    1001080
    136 followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-30875 Remote Code Execution in Chamilo LMS H5P Import Feature Before 1.11.36 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-30875

    Post summary

    The text publicly discloses an RCE vulnerability (CVE-2026-30875) in the Chamilo LMS H5P import feature prior to version 1.11.36, listing technical details but providing no PoC, exploit, patch, or evidence of active exploitation.

    0000060
    4.0K followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-30875 Chamilo LMS is a learning management system. Prior to version 1.11.36, an arbitrary file upload vulnerability in the H5P Import feature allows authenticated users wit… https://www.cve.org/CVERecord?id=CVE-2026-30875

    Post summary

    Chamilo LMS versions before 1.11.36 are vulnerable to an arbitrary file upload via the H5P Import feature; the issue is resolved in v1.11.36, with no PoC or active exploitation reported.

    00000103
    56.7K followersView on X
  • CyberDudeBivash® | Global Cybersecurity Company@cyberbivash
    Disclosure

    🚨 CYBERDUDEBIVASH SENTINEL APEX ALERT 🚨 Threat: CVE-2026-30875 - Chamilo LMS: Authenticated RCE via H5P Import Intel Report: https://ift.tt/7QfdAFS

    Post summary

    An alert reports CVE‑2026‑30875, indicating an authenticated remote‑code‑execution vulnerability via H5P Import in Chamilo LMS, with a link to an Intel Report but no exploitation details or patch information.

    0000051
    335 followersView on X
  • CVEFind.com@CveFindCom
    Patch

    [CVE-2026-30875: HIGH] Critical cyber security issue in Chamilo LMS allows RCE through an arbitrary file upload vulnerability in the H5P Import feature. Update to version 1.11.36 to patch this vulnerability.#cve,CVE-2026-30875,#cybersecurity https://cvefind.com/CVE-2026-30875

    Post summary

    The post announces a critical RCE vulnerability in Chamilo LMS and directs users to update to version 1.11.36 to mitigate the issue.

    0000070
    601 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appchamilochamilo_lms---

Explore more

Back to dashboardchamilo CVEschamilo_lms vulnerabilities