CVE-2026-73996

Masteriyo LMS versions up to 2.3.2 are vulnerable to an unauthenticated arbitrary file upload, allowing attackers to upload malicious files without authentication. This critical vulnerability could lead to remote code execution and full system compromise. Organizations using affected versions should prioritize patching to mitigate potential exploitation risks.