CyberRota
Back to database

CVE-2026-39405

UNKNOWN · CVSS N/A EPSS 0.30% Public Exploit

Source: NVD + CISA KEV + EPSS · Published: 2026-05-20 · Last synced: 2026-06-17

CyberRota Analysis

Detaylı analiz gerekiyor.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

GitHub PoC Links
github.com ↗ github.com ↗

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-39405
Severity
UNKNOWN
CVSS
N/A
EPSS
0.30%

Original NVD Description

Frappe Learning Management System (LMS) is a learning system that helps users structure their content. In versions 2.50.0 and below, a user with course editing role could upload a SCORM ZIP package to write files outside the intended directory. This issue has been resolved in version 2.50.1.