CVE-2026-63227
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk25th percentile - higher than 25% of all known CVEs
Summary
Koollab LMS has an unrestricted SCORM file upload vulnerability. An authenticated module designer can upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server.
Risk Assessment
An attacker could gain full control of the server, potentially leading to data theft, content modification, or further attacks on the infrastructure.
Recommendation
Immediately update Koollab LMS to the latest version that fixes this vulnerability, and implement strict file type controls.
Original NVD description (English source)
An unrestricted SCORM file upload vulnerability in Koollab LMS allowed an authenticated module designer to upload a SCORM package containing a PHP webshell to a publicly accessible directory and execute arbitrary code on the server.