Skip to content
OpenAdvisories

Vendor

polarnl

6 known vulnerabilities.

Products

PolarLearn 6
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2026-25126 Public exploit

    PolarLearn's unvalidated vote direction allows vote count manipulation

    PolarLearn is a free and open-source learning program. Prior to version 0-PRERELEASE-15, the vote API route (`POST /api/v1/forum/vote`) trusts the JSON body’s `direction` value without runtime validation. TypeScript types are not enforced at runtime, so an at…

    polarnl PolarLearn