CVE-2025-50187-nvd.nist.gov-Received

Chamilo is a learning management system. Prior to version 1.11.28, parameter from SOAP request is evaluated without filtering which leads to Remote Code Executi…

Published:

1 March 2026 at 23:00:00

Alert date:

2 March 2026 at 16:01:55

Source:

nvd.nist.gov

Web Technologies, Enterprise Applications

Chamilo learning management system contains a critical vulnerability in versions prior to 1.11.28. The vulnerability allows remote code execution through unfiltered evaluation of parameters from SOAP requests. Attackers can exploit this flaw to execute arbitrary code on vulnerable systems. The issue has been addressed in version 1.11.28 with proper input filtering. Organizations using affected versions should upgrade immediately to mitigate the risk of remote compromise.

Technical details

Mitigation steps:

Affected products:

Chamilo LMS