Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the assessment reinforcement endpoint, control data passed to unserialize(), write a webshell to a publicly accessible location, and execute arbitrary code on the server.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-63232 SQL Injection and Unsafe Deserialization in Koollab LMS Remote Code Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-63232
Post summary
CVE-2026-63232 is a disclosed vulnerability affecting Koollab LMS, exposing SQL injection and unsafe deserialization that can lead to remote code execution.