SEPTEMBER 20, 2026
Live Feed
Back to database
Case File

CVE-2026-65463

MEDIUM · CVSS 5.4 EPSS 0.29%

Source: NVD + CISA KEV + EPSS · Published 2026-07-23 · Last synced 2026-08-22

CyberRota Analysis

AI-Generated

The vulnerability exists in Masteriyo - LMS versions up to 2.3.1, where insecure direct object references (IDOR) allow unauthorized access to sensitive subscriber data. This could lead to information disclosure and potential data manipulation by attackers. Organizations using affected versions should prioritize remediation to protect user data and maintain system integrity.

CVE
CVE-2026-65463
Severity
MEDIUM
CVSS
5.4
EPSS
0.29%

Original NVD Description

Subscriber Insecure Direct Object References (IDOR) in Masteriyo - LMS <= 2.3.1 versions.