Signals
Back to database
Schedule53Medium5.3VulnerabilityCVE-2026-42698No patch link observed

CVE-2026-42698 — Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum Tutor LMS tutor allows Leverag…

Published Oct 8, 2026, 02:16 PM UTCIngested 8h agoSource NVD(cve-db)CVE-2026-42698

Description

Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in Themeum Tutor LMS tutor allows Leveraging Race Conditions.This issue affects Tutor LMS: from n/a through 4.1.1.

CVSS v3.1 base metrics

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:N/I:H/A:N
5.3

Medium severity

Band computed from the CVSS base score, not the source's own label — so it means the same thing across every feed.

AV

Network

Attack Vector

AC

High

Attack Complexity

PR

Low

Privileges Required

UI

None

User Interaction

S

Unchanged

Scope

C

None

Confidentiality

I

High

Integrity

A

None

Availability

References

Related threats

same CWE or vendor
High

CVE-2026-84271 — IBM Guardium Data Protection 12.2 is vulnerable to a signature verification bypass in the patch installer.

CVE-2026-84271 · 2h ago

Low

CVE-2026-94584 — A race condition and thread-safety vulnerability exists in the web management daemon of Brocade Fabric OS versions before 10.0.1.

CVE-2026-94584 · 18h ago

Low

CVE-2026-94583 — A race condition vulnerability exists in the request processing logic of the REST management interface on Brocade Fabric OS versions before 10.0.1.

CVE-2026-94583 · 19h ago

Medium

CVE-2026-107276 — MISP contains a race condition in the email-based one-time password (OTP) login flow.

CVE-2026-107276 · 1d ago

Low

CVE-2026-105140 — Obot 0.25.0 before 0.25.6 and 0.26.0 before 0.26.1 contains a race condition in auth provider group refreshes that can restore group memberships ju…

CVE-2026-105140 · 1d ago

High

CVE-2026-106500 — Backstage is an open framework for building developer portals.

CVE-2026-106500 · 2d ago