Skip to content
OpenAdvisories
Medium · 6.5 CVE-2026-85209 EUVD-2026-91567GHSA-h7qw-2qfr-8h7v

IDOR in AVEZ Electronics's LMS

Published Oct 2, 2026 · Updated Oct 2, 2026 · Assigned by TR-CERT

Vendor: AVEZ Electronics Communication Training and Consultancy Trade Product: Learning Management System (LMS)

Description

Missing Authorization vulnerability in AVEZ Electronics Communication Training and Consultancy Trade Inc. Learning Management System (LMS) allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Learning Management System (LMS): through 2026-09-18.

Affected products

VendorProductAffectedFixed
AVEZ Electronics Communication Training and Consultancy Trade Learning Management System (LMS) ≤ 2026-09-18 —

References