{"vulnerability": "CVE-2026-39878", "sightings": [{"uuid": "9ef192bf-ac3b-40c8-a1eb-a442b2cad66f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39878", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mr3x7ajem423", "content": "CVE-2026-39878\nChamilo Learning Management System versions 1.11.38 and earlier have a security flaw in the user registration form. This means an attacker can trick an administrator into running malicious code in their\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-07-20T18:44:05.330815Z"}, {"uuid": "825b4659-3543-4e4f-8170-10324c8e8ec2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39878", "type": "seen", "source": "https://bsky.app/profile/malwareobserver.bsky.social/post/3mr3y5jeb5l2e", "content": "\ud83d\udc1b VULNERABILITIES CVE Notify: \ud83d\udea8 [CVE-2026-39878](https://github.com/chamilo/chamilo-lms/security/advisories/GHSA-gcjp-f7jm-rrrg)\n...\nhttps://github.com/chamilo/chamilo-lms/security/advisories/GHSA-gcjp-f7jm-rrrg #ZeroDay #PatchManagement #Vulnerability", "creation_timestamp": "2026-07-20T19:01:01.246841Z"}, {"uuid": "d1ac7232-4c3a-4051-a9ce-f296c7f8250b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-39878", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mr46otrgne23", "content": "CVE-2026-39878 - Chamilo stored XSS via user registration leads to admin account takeover\nCVE ID : CVE-2026-39878\n \n Published : July 20, 2026, 6:16 p.m. | 1\u00a0hour, 26\u00a0minutes ago\n \n Description : Chamilo LMS versions 1.11.38 and earlier contain a stored cross-site scripting vu...", "creation_timestamp": "2026-07-20T20:58:06.670980Z"}]}