https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-10-01T10:09:39.799353+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/fkie_cve-2026-45140 fkie_cve-2026-45140 2026-10-01T10:09:40.267270+00:00

Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote attacker to execute arbitrary code on the server. The authoritative advisory does not identify the affected endpoint, component, input, or exploitation mechanism. This issue is fixed in version 2.0.1.

 https://vulnerability.circl.lu/vuln/ghsa-g4c3-4g96-6g4m GHSA-g4c3-4g96-6g4m — Chamilo LMS CStudio upload flow allows unauthenticated remote code execution 2026-10-01T10:09:40.267458+00:00

Affected: Packagist: chamilo/chamilo-lms

### Impact Ability to run arbitrary code on the server without authentication.