Exploitation ongoing with high activity in latest observed window (2 mentions)
Recommended action window: Immediate (within 24h)
NVD description
An improper access control vulnerability in Koollab LMS allowed an unauthenticated attacker to forcibly terminate the session of any user given their email address via the login kickout endpoint, resulting in a denial of service.
Priority
LOW
Exploitation
ACTIVE
PoC
NONE
Patch
NONE
Momentum
NONE
A lot of offensive activities were identified targeting Three Learning Koollab LMS (CVE-2026-63235) https://vuldb.com/vuln/384071/cti
Post summary
The text reports that many offensive actors have identified and are targeting Three Learning Koollab LMS using CVE‑2026‑63235, but offers no details on the exploit, patch, or vulnerability specifics.
CVE-2026-63235 Unauthenticated Session Termination Denial of Service in Koollab LMS https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-63235
Post summary
The brief notice announces CVE-2026-63235 as an unauthenticated session termination DoS in Koollab LMS without detailing exploits, patches, or active usage.