CVE WATCH / VULNERABILITY DETAIL
CVE-2026-44344
MEDIUMCVSS 6.6NVD feed
Published 30 October 2026 · tracked since 31 October 2026
Description
Chamilo LMS is an open-source learning management system. In the 1.x line before 1.11.40, and the 2.x line before 2.0.1, multiple `eval()` calls in the vendored PEAR `HTML_QuickForm` libraries can execute arbitrary PHP code if form element names contain attacker-influenced data. Standard Chamilo for
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog