CVE-2026-45145

The open-source learning management system Chamilo LMS is vulnerable to a database-backed PHP object injection in its career deserialization process. Specifically, the files public/main/inc/lib/career.lib.php and public/main/cron/import_csv.php call PHP's native unserialize() on the user_career.e...