https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-04T21:43:04.399364+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-291056 EUVD-2026-291056 2026-10-04T21:43:04.437940+00:00 EUVD-2026-291056 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33736 fkie_cve-2026-33736 2026-10-04T21:43:04.437973+00:00

Chamilo LMS is a learning management system. Prior to 2.0.0-RC.3, any authenticated user (including ROLE_STUDENT) can enumerate all platform users and access personal information (email, phone, roles) via GET /api/users, including administrator accounts. This vulnerability is fixed in 2.0.0-RC.3.