Vulnerability Bulletins

CVE-2026-63239

   
Affected software AWS
 
A hard-coded AWS IAM credentials vulnerability
in Koollab LMS allowed
an attacker to access shared multi-tenant S3 buckets and SQS queues, exposing
sensitive data and enabling malicious content injection, job manipulation, or
email interception.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2026-63239