CVE-2026-114388

The Chamilo LMS software (versions 2.0.0-alpha.1 before 2.0.0-RC.3 ) contains a missing authorization vulnerability within the GradebookController . This flaw allows unauthenticated users to modify gradebook certificates by requesting the set_default_certificate endpoint using arbitrary course an...