Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A SQL injection and unsafe deserialisation vulnerability in Koollab LMS allowed an authenticated attacker to inject through the manual mark assessment endpoint, control data passed to unserialize(), write a webshell to a publicly accessible location, and execute arbitrary code on the server.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-63234 SQL Injection and Unsafe Deserialization in Koollab LMS Arbitrary Code Execution https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-63234
Post summary
The post announces CVE‑2026‑63234, detailing SQL injection and unsafe deserialization issues that enable arbitrary code execution in Koollab LMS.