CVE-2026-85209

Missing Authorization vulnerability in AVEZ Electronics Communication Training and Consultancy Trade Inc. Learning Management System (LMS) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Learning Management System (LMS): through 2026-09-18.

  • Published Oct 2, 2026
  • CVSS 6.5 medium
  • 0.2% chance of exploitation in the next 30 days (EPSS)

Affected software

CVE-2026-85209 at the National Vulnerability Database