5.4
Moyenne
CVE-2026-40740 Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control…
Description
Missing Authorization vulnerability in Themeum Tutor LMS tutor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Tutor LMS: from n/a through <= 3.9.7.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Tutor LMS 3.9 | premières → 3.9.7 | Pas de correctif indiqué |
Autres CVE de Tutor LMS
Les 22 CVE de Tutor LMS →
CVE-2026-111407
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor…
6.5
Moyenne
CVE-2026-42702
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor…
7.1
Élevée
CVE-2026-42698
Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum…
5.3
Moyenne
CVE-2026-57694
Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting…
6.5
Moyenne