https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T12:38:49.927178+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-342497 EUVD-2026-342497 2026-10-02T12:38:49.929189+00:00 EUVD-2026-342497 https://cve.radiocsirt.org/vuln/fkie_cve-2026-63229 fkie_cve-2026-63229 2026-10-02T12:38:49.929218+00:00

A pre-authentication blind SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to use a time-based SQL oracle via the SSO OAuth endpoint to read sensitive database contents, including personally identifiable information, credentials, and valid JWT tokens that may enable account takeover.

 https://cve.radiocsirt.org/vuln/ghsa-8g2m-jvpm-fx9f GHSA-8g2m-jvpm-fx9f 2026-10-02T12:38:49.929248+00:00

A pre-authentication blind SQL injection vulnerability in Koollab LMS allowed an unauthenticated attacker to use a time-based SQL oracle via the SSO OAuth endpoint to read sensitive database contents, including personally identifiable information, credentials, and valid JWT tokens that may enable account takeover.