CVE-2026-16155

CVE

Threat entity extracted from intelligence sources

Frequency

occurrences

First Seen

July 19, 2026

Last Seen

July 19, 2026

API

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

Critical XSS Vulnerability in Chamilo LMS Leads to Admin Account Takeover74.0

A critical stored cross-site scripting vulnerability, CVE-2026-39878, was discovered in Chamilo LMS versions 1.11.38 and earlier. This flaw allows unauthenticated attackers to execute arbitrary JavaScript in an administrator's browser session, potentially leading to a full platform admin account tak...