CyberSecBulletin

ATutor vulnerabilities

We track 2 vulnerabilities in ATutor products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on August 20, 2026.

2vulnerabilities
0critical
2high
0exploited
8.7average CVSS score

Latest ATutor vulnerabilities

  • 8.7 High severity

    ATutor: Improper Limitation of a Pathname to a Restricted Directory

    CVE-2026-64966ATutor

    ATutor is vulnerable to a Path Traversal vulnerability in ZIP extraction functionality. An attacker with instructor privileges can upload and extract a specially crafted ZIP archive, causing files to be written outside the intended extraction directory. This a

  • 8.7 High severity

    ATutor: Unrestricted Upload of File with Dangerous Type

    CVE-2026-64960ATutor

    ATutor Gameme module allows users to upload files of any type and extension without restriction. Due to improper handling of file uploads, files are stored in a web-accessible location before their content is validated. An authenticated attacker who knows a va