<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://vulnerability.circl.lu</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Thu, 01 Oct 2026 10:09:38 +0000</lastBuildDate>
    <item>
      <title>fkie_cve-2026-45140</title>
      <link>https://vulnerability.circl.lu/vuln/fkie_cve-2026-45140</link>
      <description>&lt;p&gt;Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote attacker to execute arbitrary code on the server. The authoritative advisory does not identify the affected endpoint, component, input, or exploitation mechanism. This issue is fixed in version 2.0.1.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;Chamilo LMS is an open-source learning management system. Prior to 2.0.1, Chamilo LMS allows an unauthenticated remote attacker to execute arbitrary code on the server. The authoritative advisory does not identify the affected endpoint, component, input, or exploitation mechanism. This issue is fixed in version 2.0.1.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/fkie_cve-2026-45140</guid>
    </item>
    <item>
      <title>GHSA-g4c3-4g96-6g4m — Chamilo LMS CStudio upload flow allows unauthenticated remote code execution</title>
      <link>https://vulnerability.circl.lu/vuln/ghsa-g4c3-4g96-6g4m</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Packagist: chamilo/chamilo-lms&lt;/p&gt;
&lt;p&gt;### Impact
Ability to run arbitrary code on the server without authentication.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Packagist: chamilo/chamilo-lms&lt;/p&gt;
&lt;p&gt;### Impact
Ability to run arbitrary code on the server without authentication.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://vulnerability.circl.lu/vuln/ghsa-g4c3-4g96-6g4m</guid>
    </item>
  </channel>
</rss>
