ZeroDay Findings
Sign inSign up

Findings

CVE-2026-26977

Frappe Learning Management System (LMS) is a learning system that helps users structure their content.

Published Feb 20, 2026 · updated Jun 17, 2026 · frappe learning

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized users are able to access the details of unpublished courses via API endpoints. A fix for this issue is planned for the 2.45.0 release.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Feb 20, 2026 · NIST NVD

    Detected

    Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized users are able to access the details of unpublished courses via API endpoints. A fix for this issue is planned for the 2.45.0 release.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized users are able to access the details of unpublished courses via API endpoints. A fix for this issue is planned for the 2.45.0 release.

Affected

  • cpe frappe/learningversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-26977

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-26977

    Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized users are able to access the details of unpublished courses via API endpoints. A fix for this issue is planned for the 2.45.0 release.

    nvd.nist.gov

References