CVE-2026-64965

creationtimestamp| type| source ---|---|--- 2026-08-20 16:45:12+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-64960...

CVE-2026-64965 Missing Authorization Check in ATutor

ATutor is vulnerable to Missing Authorization Check on Test and Question Import endpoints. A low-privileged authenticated user e.g. a student enrolled in a course can bypass authorization checks by sending requests directly to the backend import endpoints, allowing the unauthorized import of test...