5.4
Medium
CVE-2026-40740 Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control…
Description
Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through <= 3.9.7.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Tutor LMS 3.9 | earliest → 3.9.7 | No fix stated |
Other CVEs of Tutor LMS
The 22 CVEs of Tutor LMS →
CVE-2026-111407
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor…
6.5
Medium
CVE-2026-42702
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor…
7.1
High
CVE-2026-42698
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum…
5.3
Medium
CVE-2026-57694
Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting…
6.5
Medium