Three Learning vulnerabilities
16 published CVEs name Three Learning among the affected products.
- Published CVEs
- 16
- Last 12 months
- 16
- Critical
- 5
- Known exploited
- 0
Critical 5High 1Medium 6Low 4Not scored 0
Newest CVEs
- CVE-2026-63242
Business logic vulnerability
Three Learning · Koollab LMS
Medium4.3 - CVE-2026-63241
Insecure direct object reference vulnerability
Three Learning · Koollab LMS
Low3.1 - CVE-2026-63240
Information disclosure vulnerability
Three Learning · Koollab LMS
Medium4.3 - CVE-2026-63239
Hard-coded AWS IAM credentials vulnerability
Three Learning · Koollab LMS
Medium5.4 - CVE-2026-63238
Authentication bypass vulnerability
Three Learning · Koollab LMS
Medium6.5 - CVE-2026-63237
TOTP two-factor authentication bypass vulnerability
Three Learning · Koollab LMS
Medium4.8 - CVE-2026-63236
Improper access control vulnerability
Three Learning · Koollab LMS
Low3.7 - CVE-2026-63235
Improper access control vulnerability
Three Learning · Koollab LMS
Low3.7 - CVE-2026-63234
SQL injection and unsafe deserialisation vulnerability
Three Learning · Koollab LMS
Critical9.9 - CVE-2026-63233
SQL injection and unsafe deserialisation vulnerability
Three Learning · Koollab LMS
Critical9.9
Products with the most CVEs
Most common weaknesses
- CWE-89 SQL injection6
- CWE-284 Improper access control2
- CWE-639 Authorization bypass through a user-controlled key (IDOR)2
- CWE-200 Exposure of sensitive information1
- CWE-287 Improper authentication1
- CWE-347 1
- CWE-434 Unrestricted file upload1
- CWE-79 Cross-site scripting (XSS)1
- CWE-798 Hard-coded credentials1