CVE-2026-45145 | Chamilo LMS up to 2.0.0 career.lib.php unserialize extra_data deserialization

October 30, 2026 Yanac

A vulnerability was found in Chamilo LMS up to 2.0.0. It has been rated as problematic. The affected element is the function unserialize of the file public/main/inc/lib/career.lib.php. The manipulation of the argument extra_data leads to deserialization.

This vulnerability is traded as CVE-2026-45145. It is possible to initiate the attack remotely. There is no exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More