CVE-2026-64968

creationtimestamp| type| source ---|---|--- 2026-08-20 16:45:19+00:00| seen| https://cert.pl/en/posts/2026/08/CVE-2026-64960...

CVE-2026-64968 Server-Side Request Forgery in ATutor

ATutor is vulnerable to Server-Side request forgery in import functionalities. An authenticated administrator can make the server request arbitrary internal HTTP endpoints, cloud metadata services, or local files via file:// if the PHP environment permits URL wrappers. Product is no longer active...