CVE-2026-30876: Chamilo Lms

Medium severity, CVSS 5.3. EPSS: 0.3% chance of exploitation in the next 30 days.

Chamilo LMS is a learning management system. Prior to version 1.11.36, Chamilo is vulnerable to user enumeration with valid/invalid username. This issue has been patched in version 1.11.36.

Affected products

• Chamilo Chamilo Lms: before 1.11.36 (fixed in 1.11.36)

Published 2026-03-16. Last modified 2026-06-17.