CVE-2026-26977 - Frappe Learning Management System exposes details of unpublished courses to unau...

CVE-2026-26977 - Frappe Learning Management System exposes details of unpublished courses to unau...

CVE ID : CVE-2026-26977 Published : Feb. 20, 2026, 2:16 a.m. | 26 minutes ago Description : Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.44.0 and below, unauthorized users are able to access the details of unpublished courses via API endpoints. A fix for this issue is planned for the 2.45.0 release. Severity: 6.9 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

CVE Details

Severity
MEDIUM
Published
Feb. 20, 2026