Access Control Vulnerability in Themeum Tutor LMS

CVE-2026-40740

What is CVE-2026-40740?

A significant vulnerability exists in Themeum's Tutor LMS that arises from incorrect configuration of access control security levels. This issue allows unauthorized users to exploit the system, potentially gaining access to sensitive features meant for authenticated users. The vulnerability affects Tutor LMS versions up to and including 3.9.7, necessitating immediate action for users to safeguard their platforms against unauthorized access.

References