CVE-2026-55840Medium· 5.4▾ TwilightPoC available

Scoold is a Q&A and a knowledge sharing platform for teams

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score42/ 100 · Moderate

impact 29.7 · likelihood 0 · exploitation 12

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

A public proof-of-concept already exists for this vulnerability — see Exploit availability below.

…

Published

Oct 15, 2026

Updated

Oct 15, 2026

CVSS

5.4

Vendor

Erudika

Product

scoold

CWE

CWE-601

Depth score

42 · Moderate

EPSS

—

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

CISA SSVC

decided 2026-10-15

Exploitation: poc
Automatable: no
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

2 events · 1 day

Oct 15, 2026Published
Disclosed via NVD
Oct 15, 2026Public exploit observed
Exploit / PoC code exists

Erudika CWE-601 #nvd #cve.org #exploit-available

Affected

scoold < 1.69.1

Full technical detail▾

Overview

Scoold is a Q&A and a knowledge sharing platform for teams. Prior to 1.69.1, the getBackToUrl() method in src/main/java/com/erudika/scoold/utils/HttpUtils.java validates the backto and returnto parameters with Strings.CI.startsWith against the configured server URL. An attacker can supply an absolute URL whose hostname begins with the legitimate hostname, causing URI.resolve() to retain the attacker URL and the prefix check to accept it. A victim who follows the crafted sign-in link can be redirected to an attacker-controlled domain after authentication, enabling phishing and possible credential or token theft. This issue is fixed in version 1.69.1.

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Change history

Field changes observed since this record was first indexed.

Oct 15, 2026Public exploit / PoC published

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#cve.org#exploit-available

← Back to feed

CVE-2026-55840Medium· 5.4▾ TwilightPoC available

Scoold is a Q&A and a knowledge sharing platform for teams

▾ Twilight zone — High severity, or a signal on a lesser flaw

Depth score42/ 100 · Moderate

impact 29.7 · likelihood 0 · exploitation 12

⚡ Agent-ready:Raw markdown ↗JSON ↗

Proof of concept

A public proof-of-concept already exists for this vulnerability — see Exploit availability below.

…

Published

Oct 15, 2026

Updated

Oct 15, 2026

CVSS

5.4

Vendor

Erudika

Product

scoold

CWE

CWE-601

Depth score

42 · Moderate

EPSS

—

Platforms

—

Source

NVD

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

CISA SSVC

decided 2026-10-15

Exploitation: poc
Automatable: no
Technical impact: partial

Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.

Timeline

Disclosure to exploitation, from the record and what we observed since indexing it.

2 events · 1 day

Oct 15, 2026Published
Disclosed via NVD
Oct 15, 2026Public exploit observed
Exploit / PoC code exists

Erudika CWE-601 #nvd #cve.org #exploit-available

Affected

scoold < 1.69.1

Full technical detail▾

Overview

Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

References

Change history

Field changes observed since this record was first indexed.

Oct 15, 2026Public exploit / PoC published

Related vulnerabilities

Connected by shared product, vendor, weakness, or advisory.

#nvd#cve.org#exploit-available