CVE-2026-40743

MediumCVSS 6.5

Published: 15/06/2026(UTC)Updated: 15/06/2026(UTC)Translated: 17/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile — higher than 16% of all known CVEs

Versions of Tutor LMS up to 3.9.7 have an issue with unauthenticated access that can lead to broken access control.

Organizations may be exposed to unauthorized access to sensitive data or system functions, potentially leading to serious security breaches.

It is recommended to update Tutor LMS to the latest version to mitigate this vulnerability.

Original NVD description (English source)

Unauthenticated Broken Access Control in Tutor LMS <= 3.9.7 versions.