Veille CVE

Semaine du 5 octobre au 11 octobre 2026

2 CVE

  1. CVE-2026-42702 7.1 Élevée

    Themeum Tutor LMS

    Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in Themeum Tutor LMS tutor allows Reflected XSS.This issue affects Tutor LMS: from n/a through 4.1.0.

  2. CVE-2026-42698 5.3 Moyenne

    Themeum Tutor LMS

    Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum Tutor LMS tutor allows Leveraging Race Conditions.This issue affects Tutor LMS: from n/a through 4.1.1.