CVE-2026-110363: thimpress learnpress Missing Authorization

CVSS: 5.4v3.1MediumDeferred

Published 19-10-2026Last modified 19-10-2026

Open JSON

Vulnerability summary

CVE-2026-110363 is a medium (CVSS 5.4) Missing Authorization vulnerability in thimpress learnpress.

Overall risk

22/100

0100

Low · default modelHow is this calculated?

CVSS score

5.4/10

010

Medium · v3.1 (CVE.org)

EPSS score

Not scored

0%100%

No EPSS score yet

KEVNot listedIn no KEV catalog

RansomwareNone recordedNo known use recorded

Public exploits0No public exploits recorded

Timeline

19-10-2026
PublishedVulnerability first disclosed.
19-10-2026
Last modifiedVulnerability information updated.

Description

Missing Authorization vulnerability in ThimPress LearnPress learnpress allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects LearnPress: from n/a through 4.4.10.

CVSS metrics

2 scores · 2 sources · 1 version

v3.15.4

EPSS trend

No EPSS score has been published for this record yet.

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

CWE-862Missing AuthorizationThe product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Affected systems

Thimpress1 product

learnpress≤ 4.4.10

1 vendor · 1 product

References

1 links

patchstack.com/database/…VDB Entry