Medium severity5.3NVD Advisory· Published Mar 16, 2026· Updated Jun 17, 2026

CVE-2026-30876

Description

Chamilo LMS is a learning management system. Prior to version 1.11.36, Chamilo is vulnerable to user enumeration with valid/invalid username. This issue has been patched in version 1.11.36.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Chamilo/Lms2 versions
cpe:2.3:a:chamilo:chamilo_lms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:chamilo:chamilo_lms:*:*:*:*:*:*:*:*range: <1.11.36
- (no CPE)range: < 1.11.36
Chamilo/Chamilollm-fuzzy
Range: <1.11.36

Patches

Vulnerability mechanics

References

github.com/chamilo/chamilo-lms/security/advisories/GHSA-cqr8-vvqp-4mp4nvdVendor Advisory
github.com/chamilo/chamilo-lms/releases/tag/v1.11.36nvdProductRelease Notes

News mentions

No linked articles in our index yet.

cvss	0.345
epss	0.000
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000