VulnSocial

CVE-2026-35196Disclosure(chamilo / chamilo_lms)

LOWCVSS 8.8 · HIGH

Signal is active with 2 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, an OS Command Injection vulnerability exists in the main/inc/ajax/gradebook.ajax.php endpoint within the export_all_certificates action, where the course code retrieved from the session variable $_SESSION['_cid'] via api_get_course_id() is concatenated directly into a shell_exec() command string without sanitization or escaping using escapeshellarg(). If an attacker can manipulate or poison their session data to inject shell metacharacters into the _cid variable, they can achieve arbitrary command execution on the underlying server. Successful exploitation grants full access to read system files and credentials, alters the application and database, or disrupts server availability. This issue has been fixed in version 2.0.0-RC.3.

chamilo CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Other references
Weakness type (CWE)
CWE-78

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • chamilo_lms

Threat summary

  • 2 mentions across 1 observed day

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • 2 total mentions across 1 day

Affected systems

Vendors
chamilo
Products
chamilo_lms

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 1d
01122Mentions · 2026-04-15: 2Technical Details · 2026-04-15: 204-15
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CVE@CVEnew
    Disclosure

    CVE-2026-35196 Chamilo LMS is an open-source learning management system. In versions prior to 2.0.0-RC.3, an OS Command Injection vulnerability exists in the main/inc/ajax/gradebook… https://www.cve.org/CVERecord?id=CVE-2026-35196

    Post summary

    The text announces an OS Command Injection vulnerability in Chamilo LMS before version 2.0.0-RC.3, detailing its nature and affected component but providing no PoC, exploit, patch, or evidence of active exploitation.

    0000085
    57.2K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-35196 OS Command Injection in Chamilo LMS Versions Prior to 2.0.0-RC.3 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-35196

    Post summary

    The CVE details an OS command injection flaw in Chamilo LMS versions before 2.0.0‑RC.3, with technical information provided but no evidence of PoC, exploit, active exploitation, or a patch in the text.

    0000045
    4.0K followersView on X
CPE platform detail11 entries

11 of 11 entries

PartVendorProductVersionTarget SWTarget HW
Appchamilochamilo_lms---
Appchamilochamilo_lms2.0.0--
Appchamilochamilo_lms2.0.0--
Appchamilochamilo_lms2.0.0--
Appchamilochamilo_lms2.0.0--
Appchamilochamilo_lms2.0.0--
Appchamilochamilo_lms2.0.0--
Appchamilochamilo_lms2.0.0--
Appchamilochamilo_lms2.0.0--
Appchamilochamilo_lms2.0.0--
Appchamilochamilo_lms2.0.0--

Explore more

Back to dashboardchamilo CVEschamilo_lms vulnerabilities