Information Disclosure

Every one of the 3 is a mark on the map. Named now: 1 to 3, most at risk first.

1. Chamilo LMS has unauthenticated access to Twig template source files exposes application logicCVE-2026-33705chamilo · CVSS 5.3 · 0.3% likely

   CWE-538

2. Chamilo LMS: User enumeration vulnerability via responseCVE-2026-30876chamilo · CVSS 6.3 · 0.2% likely

   CWE-204

3. An issue was discovered in Chamillo LMS 1.11.2. The Social Network /personal_data endpoint exposes full sensitive user information even after logout because proper cache-control i…CVE-2025-69581Chamilo · CVSS 5.5 · 0.2% likely

   CWE-524

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.