Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Insecure Direct Object Reference (IDOR) vulnerability in the gradebook evaluation edit page allows any authenticated teacher to view and modify the settings (name, max score, weight) of evaluations belonging to any other course by manipulating the editeval GET parameter. This vulnerability is fixed in 1.11.38 and 2.0.0-RC.3.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
1 version affected across 1 product
CVE-2026-32930 Chamilo LMS is a learning management system. Prior to 1.11.38 and 2.0.0-RC.3, an Insecure Direct Object Reference (IDOR) vulnerability in the gradebook evaluation edi… https://www.cve.org/CVERecord?id=CVE-2026-32930
Post summary
The text provides a brief disclosure of an IDOR vulnerability affecting Chamilo LMS gradebook evaluation, noting affected versions but lacking details on exploitation, patches, or PoC.
CVE-2026-32930 Insecure Direct Object Reference in Chamilo LMS Gradebook Evaluat... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-32930 Customizable Vulnerability Alerts: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=4
Post summary
This brief notice announces CVE-2026-32930, identifying an Insecure Direct Object Reference flaw in Chamilo LMS, and links to a vulnerability details page and alert service.
11 of 11 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | chamilo | chamilo_lms | - | - | - |
| App | chamilo | chamilo_lms | 2.0.0 | - | - |
| App | chamilo | chamilo_lms | 2.0.0 | - | - |
| App | chamilo | chamilo_lms | 2.0.0 | - | - |
| App | chamilo | chamilo_lms | 2.0.0 | - | - |
| App | chamilo | chamilo_lms | 2.0.0 | - | - |
| App | chamilo | chamilo_lms | 2.0.0 | - | - |
| App | chamilo | chamilo_lms | 2.0.0 | - | - |
| App | chamilo | chamilo_lms | 2.0.0 | - | - |
| App | chamilo | chamilo_lms | 2.0.0 | - | - |
| App | chamilo | chamilo_lms | 2.0.0 | - | - |