Findings

CVE-2026-30876

Chamilo LMS is a learning management system.

Published Mar 16, 2026 · updated Jun 17, 2026 · chamilo chamilo lms

Chamilo LMS is a learning management system. Prior to version 1.11.36, Chamilo is vulnerable to user enumeration with valid/invalid username. This issue has been patched in version 1.11.36.

Code

The project this record applies to. Exploit listings stay in References.

Timeline

Detection, updates, and resolution for this record.

  1. Mar 16, 2026 · NIST NVD

    Detected

    Chamilo LMS is a learning management system. Prior to version 1.11.36, Chamilo is vulnerable to user enumeration with valid/invalid username. This issue has been patched in version 1.11.36.

  2. Jun 17, 2026 · NIST NVD

    Updated

    Chamilo LMS is a learning management system. Prior to version 1.11.36, Chamilo is vulnerable to user enumeration with valid/invalid username. This issue has been patched in version 1.11.36.

Affected

  • cpe chamilo/chamilo lmsversion unspecified

Sources

  • CVE.orgVulnerability recordCVE-2026-30876

    Official CVE identifier

    cve.org
  • NIST NVDVulnerability recordCVE-2026-30876

    Chamilo LMS is a learning management system. Prior to version 1.11.36, Chamilo is vulnerable to user enumeration with valid/invalid username. This issue has been patched in version 1.11.36.

    nvd.nist.gov

References