CVE-2026-114388

Deferred Deferred - Pending Action

Unauthenticated Gradebook Certificate Tampering in Chamilo LMS

Publication date: 2026-10-21

Last updated on: 2026-10-28

Assigner: VulnCheck

Description

Chamilo LMS 2.0.0 pre-releases from 2.0.0-alpha.1 before 2.0.0-RC.3 contain a missing access control vulnerability in GradebookController that allows unauthenticated users to modify gradebook certificates. Attackers can request the set_default_certificate endpoint with any course id and document id to tamper with certificate configuration for any course.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-21

Last Modified

2026-10-28

Generated

2026-11-10

AI Q&A

2026-10-22

EPSS Evaluated

2026-11-09

NVD

CVE-2026-114388

EUVD

EUVD-2026-107235

Affected Vendors & Products

Vendor	Product	Version / Range
chamilo	chamilo-lms	2.0.0-alpha.1

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

CVE-2026-114388 is a missing access control vulnerability in Chamilo LMS versions 2.0.0-alpha.1 through 2.0.0-RC.2. It allows unauthenticated users to modify gradebook certificates by exploiting the set_default_certificate endpoint. Attackers can tamper with certificate configurations for any course by sending requests with arbitrary course and document IDs.

Detection Guidance

To detect this vulnerability, inspect network traffic for unauthorized requests to the set_default_certificate endpoint in Chamilo LMS. Check logs for requests with course ID and document ID parameters without authentication. Use tools like curl to test endpoints: curl -X POST 'http://<target>/gradebook/set_default_certificate?course=1&document=1' to see if it responds without errors.

Impact Analysis

This vulnerability allows attackers to alter certificate configurations for any course without authentication. This could lead to unauthorized changes in gradebook certificates, potentially affecting academic records, certifications, or compliance with institutional policies. The impact includes data integrity risks and unauthorized access to sensitive certificate information.

Compliance Impact

This vulnerability could compromise compliance with GDPR and HIPAA by allowing unauthorized modifications to academic records and certificates, which may contain personally identifiable information (PII). Unauthorized changes could violate data integrity and confidentiality requirements, leading to potential legal and regulatory penalties.

Mitigation Strategies

Immediately upgrade Chamilo LMS to version 2.0.0-RC.3 or later. Review and enforce access controls in security.yaml to implement a default-deny policy. Add #[IsGranted] attributes to controllers like GradebookController to restrict access to authorized roles only.

Hi! I’m here to help you understand CVE-2026-114388. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70

EPSS Chart

Security Radar

News mentioning this vulnerability

Loading related security news...