CVE-2026-114390 | Chamilo LMS 2.0.0-alpha.1 AJAX handlers public/main/inc/ajax improper authorization

October 21, 2026 Yanac

A vulnerability classified as problematic was found in Chamilo LMS 2.0.0-alpha.1. Affected by this issue is the function get_users_by_group_course/user_by_all_roles/export_all_certificates of the file public/main/inc/ajax of the component AJAX handlers. The manipulation results in improper authorization.

This vulnerability was named CVE-2026-114390. The attack may be performed from remote. There is no available exploit.

Upgrading the affected component is advised.VulDB Recent EntriesRead More