CVE-2024-47886CWE-502

Chamilo: Post-Auth Remote Code Execution

High · published March 2, 2026

CVSS v4.0
8.7
EPSS
1%
Percentile
60.6
In the wild
Unconfirmed
What it is

Chamilo is a learning management system. Chamillo is affected by a post-authentication phar unserialize which leads to a remote code execution (RCE) within versions 1.11.12 to 1.11.26. By abusing multiple supported features from the virtualization plugin vchamilo, the vulnerability allows an administrator to execute arbitrary code on the server. This issue has been patched in version 1.11.26.

The record
Technical detail
CVSS v4.0
8.7 · HIGH
Vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N
EPSS
0.00940 · 60.6th percentile
Weakness
CWE-502 · Deserialization of Untrusted Data
Published
2026-03-02T14:23Z
EPSS history
Timeline
  • 02 MAR 14:23Z
    Chamilo: Post-Auth Remote Code Execution
    cvelistv5