CVE-2026-63242
MEDIUM
NVD
CVSS Score
4.3
Severity
MEDIUM
Published
Jul 29, 2026
Vendor
unknown
Description
A business logic vulnerability in Koollab LMS allowed an authenticated learner to set their lesson completion status to completed via the SCORM commit endpoint without viewing the lesson material, compromising training and completion records.