CVE-2026-40743 Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions

Description

Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions.

Produits et versions touchés

Produit	Versions touchées	Corrigé en
Tutor LMS 3.9	premières → 3.9.7	Pas de correctif indiqué

Autres CVE de Tutor LMS

Les 22 CVE de Tutor LMS →

CVE-2026-111407 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor… 6.5 Moyenne CVE-2026-42702 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor… 7.1 Élevée CVE-2026-42698 Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum… 5.3 Moyenne CVE-2026-57694 Authorization Bypass Through User-Controlled Key vulnerability in Themeum Tutor LMS tutor allows Exploiting… 6.5 Moyenne