CVE-2026-26031
Frappe LMS affected by unauthorised user was able to access the full list of batch enrolled students
Vexday Risk Score
8Baixo
Decisão SSVC (CISA)
Track
Sem sinal de exploração → monitorar
CVSS 1.3EPSS 0.2%KEV nãoPoC —Patch —
Ciclo de vida
11 fev 2026Publicada no NVD
Recomendação: Monitorar — sem sinal de exploração no momento.
Frappe Learning Management System (LMS) is a learning system that helps users structure their content. Prior to 2.44.0, security issue was identified in Frappe Learning, where unauthorised users were able to access the full list of enrolled students (by email) in batches. This vulnerability is fixed in 2.44.0.
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:U
Produtos afetados
frappe · lmsQuer saber se a sua infraestrutura está exposta a isto?
Falar com a TrueHacking →