Skip to content
Threat Feed
Subscribe

CPE

Cpe:2.3:a:chamilo:chamilo_lms:2.0.0:rc1:*:*:*:*:*:*

1 brief RSS
critical advisory

Chamilo LMS OS Command Injection Vulnerability (CVE-2026-35196)

Chamilo LMS versions prior to 2.0.0-RC.3 are vulnerable to OS Command Injection via the _cid session variable in the export_all_certificates action, potentially leading to arbitrary command execution.

PoC cve-2026-35196 os command injection chamilo lms web application
2r 1t 1c updated