CVE-2026-33707 is a vulnerability tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed April 11, 2026; most recent activity April 11, 2026.
CVE-2026-33707 is a critical vulnerability affecting Chamilo LMS versions prior to 1.11.38 and 2.0.0-RC.3. The flaw arises from a weak password reset mechanism that generates predictable tokens using sha1($email)…