https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T04:13:47.034336+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-291424 EUVD-2026-291424 2026-10-05T04:13:47.065080+00:00 EUVD-2026-291424 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33705 fkie_cve-2026-33705 2026-10-05T04:13:47.065112+00:00

Chamilo LMS is a learning management system. Prior to 1.11.38, Twig template files (.tpl) under /main/template/default/ are directly accessible without authentication via HTTP GET requests. These templates expose internal application logic, variable names, AJAX endpoint URLs, and admin panel structure. This vulnerability is fixed in 1.11.38.