CVE-2026-56877

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-56877", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "state": "PUBLISHED", "assignerShortName": "mitre", "dateReserved": "2026-06-23T15:43:45.665Z", "datePublished": "2026-07-13T21:51:43.515Z", "dateUpdated": "2026-07-16T06:49:11.082Z"}, "containers": {"cna": {"affected": [{"defaultStatus": "unknown", "product": "SCORM Lab Launch Integration", "vendor": "Skillable", "versions": [{"lessThanOrEqual": "2026-07-13", "status": "affected", "version": "0", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session token. An authenticated user can substitute arbitrary userId values to bypass per-user lab launch rate limits and consume other users' lab allocations, resulting in denial of service against targeted users' lab and exam access. Skillable was formerly named\u00a0Learn on Demand Systems."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-472", "description": "CWE-472 External Control of Assumed-Immutable Web Parameter", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-07-13T21:51:43.515Z"}, "references": [{"url": "https://www.skillable.com/security/"}, {"url": "https://www.openwall.com/lists/oss-security/2026/07/12/1"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}}, "adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/07/12/1"}, {"url": "http://www.openwall.com/lists/oss-security/2026/07/12/2"}, {"url": "http://seclists.org/fulldisclosure/2026/Jul/20"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-07-16T06:49:11.082Z"}}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-07-14T12:46:25.980656Z", "id": "CVE-2026-56877", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-14T12:46:32.749Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "http://www.openwall.com/lists/oss-security/2026/07/12/1"}, {"url": "http://www.openwall.com/lists/oss-security/2026/07/12/2"}, {"url": "http://seclists.org/fulldisclosure/2026/Jul/20"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2026-07-16T06:49:11.082Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-56877", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-07-14T12:46:25.980656Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-07-14T12:46:29.259Z"}}], "cna": {"metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 6.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "Skillable", "product": "SCORM Lab Launch Integration", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "2026-07-13"}], "defaultStatus": "unknown"}], "references": [{"url": "https://www.skillable.com/security/"}, {"url": "https://www.openwall.com/lists/oss-security/2026/07/12/1"}], "x_generator": {"engine": "CVE-Request-form 0.0.1"}, "descriptions": [{"lang": "en", "value": "The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session token. An authenticated user can substitute arbitrary userId values to bypass per-user lab launch rate limits and consume other users' lab allocations, resulting in denial of service against targeted users' lab and exam access. Skillable was formerly named\u00a0Learn on Demand Systems."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-472", "description": "CWE-472 External Control of Assumed-Immutable Web Parameter"}]}], "providerMetadata": {"orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre", "dateUpdated": "2026-07-13T21:51:43.515Z"}}}, "cveMetadata": {"cveId": "CVE-2026-56877", "state": "PUBLISHED", "dateUpdated": "2026-07-16T06:49:11.082Z", "dateReserved": "2026-06-23T15:43:45.665Z", "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "datePublished": "2026-07-13T21:51:43.515Z", "assignerShortName": "mitre"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unknown", "product": "SCORM Lab Launch Integration", "vendor": "Skillable", "versions": [{"lessThanOrEqual": "2026-07-13", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "cve@mitre.org"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The SCORM lab launch endpoint in Skillable (scorm.skillable.com) through 2026-07-13 does not validate the client-supplied userId parameter against the authenticated SCORM session token. An authenticated user can substitute arbitrary userId values to bypass per-user lab launch rate limits and consume other users' lab allocations, resulting in denial of service against targeted users' lab and exam access. Skillable was formerly named\u00a0Learn on Demand Systems."}, {"lang": "es", "value": "El endpoint de lanzamiento de laboratorios SCORM en Skillable (scorm.skillable.com) hasta el 13-07-2026 no valida el par\u00e1metro userId proporcionado por el cliente contra el token de sesi\u00f3n SCORM autenticado. Un usuario autenticado puede sustituir valores arbitrarios de userId para eludir los l\u00edmites de tasa de lanzamiento de laboratorios por usuario y consumir las asignaciones de laboratorio de otros usuarios, lo que resulta en denegaci\u00f3n de servicio contra el acceso a laboratorios y ex\u00e1menes de usuarios objetivo. Skillable se llamaba anteriormente Learn on Demand Systems."}], "id": "CVE-2026-56877", "lastModified": "2026-10-24T22:10:00.210", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 6.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 3.4, "source": "cve@mitre.org", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-56877", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-07-14T12:46:25.980656Z", "version": "2.0.3"}}]}, "published": "2026-07-13T22:16:48.133", "references": [{"source": "cve@mitre.org", "url": "https://www.openwall.com/lists/oss-security/2026/07/12/1"}, {"source": "cve@mitre.org", "url": "https://www.skillable.com/security/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://seclists.org/fulldisclosure/2026/Jul/20"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2026/07/12/1"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.openwall.com/lists/oss-security/2026/07/12/2"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-472"}], "source": "cve@mitre.org", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "generic", "value": "[0,2026-07-13]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "original": {"product": "SCORM Lab Launch Integration", "source": "cna", "vendor": "Skillable"}, "product": "scorm_lab_launch_integration", "vendor": "skillable"}], "created": "2026-07-14T13:00:04.575701+00:00", "title": "SCORM Lab Launch Rate\u2011Limit Bypass Enables Denial of Service", "updated": "2026-07-31T11:15:05.506603+00:00", "vendors": ["skillable", "skillable$PRODUCT$scorm_lab_launch_integration"]}