VYPR
← All advisories
High severityNVD Advisory· Published May 9, 2026· Updated Jul 24, 2026

CVE-2026-8207

CVE-2026-8207

Description

Gibbon versions before v30.0.01 are affected by an authenticated SQL Injection vulnerability by abusing the Tracking/graphing https://github.com/GibbonEdu/core/blob/c431e25fdc874adece5d2dc7e408e9aa2d1abadb/modules/Tracking/graphing.php#L145 feature. Successful exploitation requires Teacher or higher privileges. Exploitation could result in unintended read/write activities to the underlying database.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Gibbon/Corereferences2 versions
    (expand)+ 1 more
    • (no CPE)
    • (no CPE)range: <30.0.01
  • Gibbon/Gibbonllm-fuzzy
    Range: <30.0.01

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.