Skip to content
Threat Feed

Tag

Cve-2026-33710

1 brief RSS
high advisory

Chamilo LMS REST API Key Brute-Force Vulnerability (CVE-2026-33710)

Chamilo LMS versions prior to 1.11.38 and 2.0.0-RC.3 generate predictable REST API keys, allowing attackers with knowledge of a username and approximate key creation time to brute-force access.

cve-2026-33710 chamilo api-key brute-force webserver
2r 1t 1c