CVE-2026-40743 Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions

Description

Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions.

Affected products and versions

Product	Affected versions	Fixed in
Tutor LMS 3.9	earliest → 3.9.7	No fix stated

Other CVEs of Tutor LMS

The 22 CVEs of Tutor LMS →

CVE-2026-111407 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor… 6.5 Medium CVE-2026-42702 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor… 7.1 High CVE-2026-42698 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum… 5.3 Medium CVE-2026-57694 Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting… 6.5 Medium