C
Vendor security profile
chamilo
Product portfolio, patch evidence and exploitation signals in a single security scorecard
The data is combined from the CVE Program, NVD, CISA KEV and vendor security advisories.
Total CVEs26
Critical5
CISA KEV0
Public exploit4
Patch rate%31
Avg. CVSS6.7
12-month vulnerability rate
0
0
0
0
0
9
0
0
1
0
3
0
CVE KEV
CVE severity distribution
26toplam CVE
Critical5 (19%)
High6 (23%)
Medium14 (54%)
Low1 (4%)
Patch and exploitation view
%31
Verified patch
%0
CISA KEV
%15
Public exploit
8Patch available
0Partial
0Workaround
0Vendor: no patch
18Unknown
Latest vulnerabilities
9.8
CVE-2026-45140
Chamilo LMS CStudio upload flow allows unauthenticated remote code execution
C
Patch status unknownEPSS %1
9.0
CVE-2026-45143
Chamilo LMS: Student-to-admin stored XSS in private messages via v-html
C
Patch status unknownEPSS %0
5.3
CVE-2026-82535
Chamilo LMS Stored XSS via Survey Answer Submission in reporting.php
C
Patch verifiedEPSS %0
9.3
CVE-2026-39878
Chamilo stored XSS via user registration leads to admin account takeover
C
Patch status unknownEPSS %0
8.8
CVE-2026-40291
Improper privilege management in Chamilo Lms
C
Patch status unknownEPSS %0
8.8
CVE-2026-35196
OS command injection in Chamilo Lms
C
Patch verifiedEPSS %3
7.1
CVE-2026-34602
Vulnerability in Chamilo Lms
C
Patch verifiedEPSS %0
6.5
CVE-2026-34370
Vulnerability in Chamilo Lms
C
Patch status unknownEPSS %0
5.4
CVE-2026-34161
Cross-site scripting in Chamilo Lms
C
Patch verifiedEPSS %0
8.6
CVE-2026-34160
Missing authentication in Chamilo Lms
C
Patch verifiedEPSS %1