Vulnerabilities and Security Researches

Interactive Content – H5P, CVE-2026-112868

CVE, Research URL: CVE-2026-112868
Home page URL: Security reports for Interactive Content – H5P
Application: Interactive Content – H5P
Published on: Oct 21, 2026
Research Description: Authorization Bypass Through User-Controlled Key vulnerability in H5P H5P h5p allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects H5P: from n/a through 1.17.9.
Affected versions: max 1.17.10.
Status: vulnerable