Verified

CVE-2026-85571: Tutor LMS 4.0.5 to before 4.1.1

Affected technology

Tutor LMS · 4.0.5 to before 4.1.1
Vendor not specified by the source

Description’s affected range: before 4.1.1 does not verify that the posts named in its course content ordering requests belong to a course the requester manages

Component: Not specified by the source

What an attacker can do

The source does not specify what an attacker can achieve.

Published 2026-10-10 06:17:39.265294+00:00

KEV: no

Provenance

GitHub Advisory Database · Source record · observed 2026-10-10 07:23:45.480922+00:00 UTC
NVD CVE API 2.0 · Source record · observed 2026-10-10 06:17:36.054866+00:00 UTC

Stable permalink: https://cybercodered.org/item/cve-cve-2026-85571.html