← Database

CVE-2026-26977

MEDIUM CVSS: 5.3 Published: 2026-02-20 Modified: 2026-06-17

Description

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized users are able to access the details of unpublished courses via API endpoints. A fix for this issue is planned for the 2.45.0 release.

Affected Platforms

Frappe Learning

Weakness Type

CWE-284, CWE-862

References